Access that outlasts a role
Former staff still have logins. Shared accounts have no clear owner. Nobody checks who can see sensitive files.
Independent cybersecurity & IT governance
Your trusted cybersecurity advisor.
MOAT works on your side of the table, alongside your existing IT provider — not instead of them. We help you understand everyday risk, strengthen basic IT governance, evaluate recommendations, and bring in vetted specialists only when deeper expertise is needed.
Already have IT support? Good — you'll still need it. MOAT is the independent check that helps verify their advice — and your decisions — hold up.
20+
MOAT’s advisory work draws on 20+ years of IT leadership experience in the nonprofit and private sector.
Practical judgment from people who've been responsible for these decisions themselves — not just consulted on them.
Cybersecurity starts with the everyday
Small gaps in IT governance create real exposure.
Security depends less on tools and more on the decisions behind them — who has access, what's backed up, who approves what. MOAT helps you see where those basics are missing.
Backups nobody has tested
A backup job runs, but no one can say when it was last restored — or who's responsible if it fails.
IT decisions made one request at a time
Software and vendor access pile up with no approval process, inventory, or review date.
Basic steps left unwritten
Staff don't know who to call about a phishing email, a lost laptop, or an outage — until it happens.
A clear place to begin
The MOAT Baseline
A focused review of your everyday cybersecurity and IT governance. See where you stand before deciding what to change.
Your starting point
A roadmap, not a pile of findings
We review what your team and providers can show us — documentation, access, evidence. Scope is agreed with you first.
You leave with:
- A prioritized list of what to address first
- Clear ownership for each item
- A note of anything that needs deeper technical review
Areas we may review at a high level
- Access
- Who has accounts, permissions, and shared logins — and how often they're reviewed.
- Onboarding & offboarding
- How staff and volunteers get access, and how it's removed when they leave.
- Microsoft 365 practices
- How sign-in, sharing, and admin access are set up and governed day to day.
- Backups
- What's backed up, how it's tested, and what evidence exists that recovery works.
- Policies & vendors
- What's written down, who's responsible, and how often it's revisited.
Clear about what we know
Every finding is labeled, so you know exactly how much to trust it.
- Reported
- What your team or provider told us. Not yet confirmed.
- Verified
- Confirmed by evidence we reviewed, within an agreed scope.
- Needs deeper review
- A technical test is needed before we can say more.
The Baseline is an advisory review. Technical testing and implementation are scoped separately, only if needed.
The advisory path
Understand where you stand. Know what comes next.
The Baseline produces your roadmap. Ongoing advisory helps you act on it — evaluating new decisions, bringing in vetted specialists when needed, and verifying the work that gets done.
One advisor, start to finish. — MOAT stays on your side from the first review through verification.
- 01
Baseline
See your everyday exposure, current safeguards, and missing processes.
- 02
Roadmap
Prioritized, practical improvements with clear owners and decision points.
- 03
Ongoing advisory
Evaluate new recommendations and strengthen governance as things change.
- 04
Vetted specialists, when needed
We help find the right expertise for clearly scoped work. You approve it.
- 05
Verification
We check evidence against what was agreed, and note what's still open.
Specialists only join when there's a defined need. Verification closes the loop and feeds the next roadmap.
Advice that fits the need
One decision. Or every decision after it.
Get focused help with a single project, or ongoing support as your needs change. Either way, MOAT stays independent.
Advice with a clear role
You approve the work. MOAT helps verify it holds up.
We help you judge a recommendation before you spend time or money on it, then check that what was agreed actually happened. Day-to-day support and technical delivery stay with your own team or provider — MOAT doesn't replace them.
You set direction
You approve priorities, budget, providers, and risk decisions. You keep the relationships and authorize the work.
MOAT advises and verifies
We run the Baseline, evaluate advice, build the roadmap, and confirm the evidence that work was actually done.
Providers implement
Your IT team and any vetted specialists deliver the technical work. Deeper expertise is brought in only where the roadmap calls for it.
Small businesses & nonprofits
A plan sized to the organization you actually have.
For small businesses
A clear view of your IT decisions, everyday responsibilities, and advice that fits a small team's time and budget.
For nonprofits
Clarity on staff and volunteer access, provider responsibilities, and decisions that protect your mission — not just your systems.
Plans tailored to your needs
We start with where you are. Together, we agree on priorities, scope, and how much ongoing advisory makes sense.
Specialist work is recommended only where there's a defined need — separately scoped, and only with your approval.
Start a ConversationCommon questions
Know who's responsible for what.
How independent advice fits alongside the team and providers you already have.
What does an independent advisor actually do?
MOAT helps you understand what you need, evaluate recommendations from your providers, and confirm the work agreed on was actually delivered — without selling or installing the technology itself.
Do you replace our IT provider?
No. MOAT works alongside your existing IT team or provider. We give you an independent, non-technical-jargon check on their recommendations — we don't take over day-to-day support.
What does "IT governance" mean in plain terms?
It's the everyday decisions and habits that keep technology accountable: who can access what, what gets backed up, who signs off on purchases, and who's responsible when something goes wrong.
A practical first step
Make your next IT decision with a trusted advisor.
Tell us what feels unclear — a process, a security concern, or a recommendation you need a second opinion on. We'll help you find a useful starting point.