The whole job: your IT, your security, and your compliance evidence, run for you.
If you’ve wondered what you actually get from Simon Says Systems, here’s the full answer on one page. We keep the office running, keep your data protected, and keep the proof that we did. One local specialist owns all of it. You get a real person who answers, not an offshore ticket queue.
20-minute call. No obligation, and no jargon.
Everything that keeps the office up, safe, and provable.
Six things, bought together, run by one team. They’re not menu items you bolt on one at a time. They’re how a small business gets enterprise-grade protection without a full IT department.
Managed IT & helpdesk
Workstations, servers, networks, and the day-to-day “my computer won’t…”. Monitored, patched, and supported, remote-first with on-site when it’s genuinely needed. You call one number and the buck stops with us.
Security & managed detection
Managed EDR on every workstation and server, plus identity-threat detection on your Microsoft 365 sign-ins, watched around the clock by a security operations center with real human analysts. Email security stops the phishing and impersonation aimed at your front desk and accounting.
Backup & ransomware recovery
Your Microsoft 365 backed up continuously, plus an immutable, object-locked second copy of critical data that ransomware can’t alter or delete. We test restores and keep a dated log, so a bad day doesn’t become a breach notification.
HIPAA & FTC Safeguards, plus signed BAA
The technical safeguards your regulator expects: encryption, access control and MFA, audit logging, patch and configuration management. We sign a Business Associate Agreement with every healthcare client we take on, and bring the same program to FTC Safeguards offices.
Documentation & evidence
The proof behind the controls, kept audit-ready: coverage tables, a Conditional Access export, a restore-test log, an incident-response plan. The evidence an underwriter or an OCR look asks for. Most shops turn a control on. Few produce the paper.
Business software support
We speak Microsoft 365 and QuickBooks, plus the line-of-business apps your office runs on, from Dentrix and athenahealth to UltraTax, Applied Epic and Clio, and we coordinate with your software vendors so you’re never stuck playing middleman.
What we put in place, and where we stop.
- Encryption: your business and client data protected at rest and in transit.
- Access control & MFA: only the right staff reach the right data.
- Audit logging: a record of who accessed what, when.
- Backup & ransomware-resilient recovery: tested restores, not hope.
- Endpoint detection & response (EDR): threats caught on the devices themselves.
- Email security: phishing and impersonation blocked before staff see them.
- Patch & configuration management: systems kept current and hardened.
- Documentation: evidence of the safeguards you have in place.
This page describes the services and technical safeguards we provide; it is not legal or compliance advice and is not a guarantee of regulatory outcomes.
Same service, matched to your software and your regulator.
We go deep in the practices and offices we serve rather than spreading thin across everyone. Pick your front door:
CPA & accounting firms →
UltraTax, Lacerte, Drake, QuickBooks. FTC Safeguards / WISP, handled.
Insurance agencies →
Applied Epic, AMS360, EZLynx, HawkSoft. FTC Safeguards, handled.
Law firms →
Clio, MyCase, PracticePanther, NetDocuments. The security your Rule 1.6 confidentiality duty implies.
Dental practices →
Dentrix, Eaglesoft, Open Dental & imaging. HIPAA technical safeguards + signed BAA.
Medical practices →
athenahealth/EHR, e-prescribing, clearinghouse uptime. HIPAA safeguards + BAA.
The questions we get before the first call.
So what exactly do you do?
Managed IT and helpdesk, security and managed detection, backup and recovery, business software support, and the documentation behind all of it. One local specialist owns the whole stack so you don’t have to.
Is support remote or on-site?
We’re remote-first: most issues are fixed fast over a secure remote session. Because we’re local to Menifee, we can come on-site across Riverside County when something genuinely needs hands-on.
Are you available 24/7?
The helpdesk is business hours, Mon–Fri 9:00am–5:00pm, and you get Craig, not a queue. Security monitoring is 24/7: your devices and Microsoft 365 sign-ins are watched around the clock by the security operations center behind our tooling.
What does it cost?
It depends on your team size, the systems you run, and how much security work you need. No surprise add-ons, no long setup. Tell us what you have on a short, free call and we’ll give you a straight number.
Let’s make your IT boring again.
Book a free, 20-minute check. We’ll walk through what you have, what’s missing, and what it would cost to hand the whole thing to us. No obligation, and we never ask for personal information.