# Co-managed IT. We take load off your IT team. Source: https://vetosec.at/en/services/co-managed-it/ Your IT team keeps operations running. Security, backup tests and projects rarely get the time they need. We take over exactly those parts, while responsibility and access stay with your team. - **Duties** split in writing - **Access** personal, with MFA - **Monthly report** to your IT lead ## What we take over You pick the areas, we deliver them reliably. - [**Monitoring and security alerts**](https://vetosec.at/en/services/monitoring/): We monitor servers, firewalls and backups and check every important alert. Your team only gets what concerns it. - [**Hardening and updates**](https://vetosec.at/en/how-we-build/): Servers hardened to the CIS Benchmark, updates rolled out on schedule and documented. - [**Backup and restore tests**](https://vetosec.at/en/solutions/backup/): We check every backup run and test restores on a schedule. - [**Security projects**](https://vetosec.at/en/services/it-solutions/): Single sign-on, remote access, segmentation or a new firewall. Planned, built and handed over to your team. - [**Audits and evidence**](https://vetosec.at/en/services/gap-analysis/): Preparation for NIS2 and ISO 27001, documents for customers and insurers. ## Working together How we split the work. 1. **Assessment**: Systems, responsibilities and the tools your team already uses. 2. **Agree the split**: Who does what and who is informed when. In writing, as a responsibility matrix. 3. **Set up access**: Personal accounts with MFA in your systems, revocable at any time. 4. **Operations and reporting**: Monthly report to the IT lead and regular check-ins. ## Contracts, data protection and access What procurement and data protection want to know upfront. - **Service levels**: Response times are set in the contract. For around-the-clock cover we work with fixed cooperation partners. - **Data processing**: Where we process personal data, we sign a data processing agreement under Art. 28 GDPR. - **Data location**: On your premises or in data centres in the EU. - **Access**: Every access uses a personal account with MFA and is logged. - **Confidentiality**: We sign a non-disclosure agreement before we start. - **End of the engagement**: Documentation, network plan and credentials belong to you and are handed over in full. ## Who it is for For companies with in-house IT. ### A good fit if - You have an IT team or an IT lead - Security and backup tests fall behind in daily work - NIS2, ISO 27001 or customers ask for evidence - A project needs experience you lack in-house ### What it is not - Not a replacement for your IT team - Not a certification, we prepare you for audits ## For IT leads Technical details: Linux · CIS · SELinux · Ansible · ZFS - **Operating system**: Rocky Linux or Debian, hardened to the CIS Benchmark, services confined with SELinux. - **Services**: In containers, new versions tested first, rollback in minutes. - **Automation**: Setup and hardening with Ansible, every server gets the same tested building blocks. - **Access**: Management only internally or via remote access, personal accounts with MFA. - **Backup**: ZFS snapshots, encrypted offsite copy, optionally with Object Lock, restore tests on a schedule. - **Monitoring**: Availability, resources, security events and backups on our platform, an engineer checks important alerts. - **Service levels**: Response times by agreement, around the clock via fixed cooperation partners. - **Documentation**: Network plan, runbook and credentials belong to you and are handed over on request. ## References Projects running in production today. - **Central monitoring and SIEM** (Building materials · group of companies): Infrastructure and security events of several companies visible in one place, in continuous operation. - **Incident response** (Public sector): Compromised project and web servers investigated, cleaned, hardened and re-checked. - **Infrastructure and security** (University & planning): Published projects from a university and a planning firm. [All references](https://vetosec.at/en/references/) ## Frequently asked questions ### What is co-managed IT? Co-managed IT means the in-house IT team and an external provider share operations. In-house IT keeps responsibility and oversight; the provider takes over defined areas such as monitoring, security or backup. ### Do you replace our IT team? No. We take on the agreed tasks. Decisions and access stay with your team. ### How do we work together day to day? Monitoring and analysis run on our platform. Alerts and reports go to the people you name, plus regular check-ins. ### Are there guaranteed response times? Yes, by agreement. For around-the-clock service levels we work with fixed cooperation partners. ### What does it cost? A fixed monthly price depending on the areas we take over and the number of systems. You get the quote after the assessment. ## Related - [Monitoring & SIEM](https://vetosec.at/en/services/monitoring/): part of operations - [Managed services](https://vetosec.at/en/services/managed-services/): fixed price per service - [Gap analysis & consulting](https://vetosec.at/en/services/gap-analysis/): ISO 27001, NIS2, GDPR ## Co-managed IT for companies with in-house IT in Austria vetosec supports companies with in-house IT across Austria as a co-managed IT partner: security monitoring and SIEM, CIS hardening and patching, backup with restore tests, security projects and NIS2 and ISO 27001 preparation. Updated: October 19, 2026 Provider: vetosec, Dipl.-Ing. Samuel Ziegler, BSc, Berndorf, Lower Austria, Austria. Contact: https://vetosec.at/en/contact/