# Fasthuma IT Solutions & MSP – Cybersecurity > Cybersecurity for San Francisco Bay Area small and mid-sized businesses, from an IT company in Fremont, California, in business since 2008. On-site cybersecurity risk assessments with a written report and a roadmap and timeline, network security upgrades and IT refreshes, incident response and forensics, cyber insurance and compliance help, and managed security. CompTIA certified. ## Key facts - Business name: Fasthuma IT Solutions & MSP (registered DBA of Fasthuma Enterprises Inc.) - In business since: 2008 - Address: 42307 Osgood Rd, Suite B, Fremont, CA 94539, USA - Phone: (510) 371-9468 - Email: info@fasthuma.com - Hours: Monday to Friday, 9 AM to 5 PM Pacific; closed Saturday and Sunday - Book a free phone consultation: https://bookings.cloud.microsoft/book/FasthumaIT@fasthuma.com/ - Areas served: Fremont, CA and the San Francisco Bay Area - Credentials: CompTIA certified - Channel partners: Dell, Lenovo, Ubiquiti, Microsoft, Supermicro, Fortinet, RingCentral - Google Business Profile: https://share.google/QsAZpqobH6bSv5c9t - Yelp: https://www.yelp.com/biz/fasthuma-it-fremont-5 ## Rates (USD, on site; subject to change, confirmed before work starts) - Cybersecurity risk assessment and incident response/forensics, up to 500 devices: $1,000 per hour - Same services, more than 500 devices (enterprise): $2,500 per hour - The roadmap and timeline are included with every risk assessment at no extra charge, delivered after the on-site visit. - Network security upgrades and refreshes: quoted per project from the roadmap. - Managed security (monthly plans Flame, Blaze, Inferno): pricing at https://msp.fasthuma.com/pricing/ ## Breach or ransomware - During business hours, call (510) 371-9468; Fasthuma schedules an on-site visit as soon as possible. - Outside business hours, book a free phone consultation at https://bookings.cloud.microsoft/book/FasthumaIT@fasthuma.com/; Fasthuma gets back as soon as possible. - First steps (take the network offline): https://cyber.fasthuma.com/breached-what-to-do-now/ ## Services - [Cybersecurity Risk Assessment & Roadmap](https://cyber.fasthuma.com/cybersecurity-risk-assessment/): On-site cybersecurity risk assessment for Bay Area businesses, based on NIST framework principles. You get a written report of every risk with a recommendation, plus a phased roadmap and timeline at no extra charge. - [Network Security & Refreshes](https://cyber.fasthuma.com/network-security-refresh/): Network security upgrades and IT refreshes recommended by the risk assessment: firewalls and VPN, Wi-Fi and segmentation, servers and workstations, backups, Microsoft 365 security, endpoint protection, YubiKey sign-in and security awareness training. - [Incident Response & Forensics](https://cyber.fasthuma.com/incident-response-forensics/): Cyber incident response and forensics for businesses that have been breached: we come on site, find how the attackers got in, present a written report and help patch the vulnerability. - [Cyber Insurance & Compliance](https://cyber.fasthuma.com/cyber-insurance-compliance/): Cyber insurance policy review and compliance help: we check the security requirements in your policy against your network, and help businesses prepare for HIPAA, PCI DSS, CMMC, NIST CSF, SOC 2 and CCPA requirements. - [Managed Security](https://cyber.fasthuma.com/managed-security/): Ongoing managed cybersecurity through Fasthuma IT Solutions & MSP: 24/7 remote monitoring, patch management, managed antivirus and Wazuh SIEM security monitoring. - [Breached? What to do now](https://cyber.fasthuma.com/breached-what-to-do-now/): Step-by-step guide to taking a business network offline after a breach, based on CISA guidance. ## Compliance help - Helps businesses prepare for HIPAA, PCI DSS, CMMC, NIST CSF, SOC 2, CCPA requirements. Fasthuma does not certify or audit; formal audits and certifications are done by independent auditors or assessors. Not legal advice. ## Frequently asked questions ### Should I shut down a computer that has ransomware? Not if you can disconnect it instead. CISA advises unplugging affected devices from the network and powering them down only if you cannot disconnect them, because shutting down erases evidence held in memory. ### How do I take my office network offline? Unplug the cable between your firewall or router and your main network switch, or unplug the switch's power. To cut the internet connection too, unplug the cable from your internet provider's modem to your firewall. ### Who do I report a cyber attack to? CISA suggests reporting to CISA (cisa.gov/report or (888) 282-0870, 24/7), your local FBI field office, or the FBI's Internet Crime Complaint Center at ic3.gov. ### When can Fasthuma IT help? During business hours (Monday–Friday, 9 AM–5 PM), call (510) 371-9468 and we'll schedule an on-site visit as soon as possible. Outside business hours, book a free phone consultation and we'll get back to you as soon as possible. ### How do I book a cybersecurity consultation? Book a free phone consultation online at any time, or call (510) 371-9468, Monday–Friday, 9 AM–5 PM. We use the call to understand your network and schedule the on-site visit. ### What are your hours? Monday to Friday, 9 AM to 5 PM. Closed Saturday and Sunday. ### What if we are breached outside business hours? Book a free phone consultation and we'll get back to you as soon as possible. In the meantime, follow our step-by-step guide to taking your network offline. ### Do you come to our office? Yes. Cybersecurity risk assessments and incident response are done on site at your business, in Fremont and across the San Francisco Bay Area. ### Can you guarantee my cyber insurance claim will be paid? No. Claim decisions are made by your insurer. We review your policy's security requirements and help make sure your controls meet them and are documented, so you're not caught out when you need to file a claim. ### Which compliance standards do you help with? HIPAA, PCI DSS, CMMC, NIST CSF, SOC 2 and CCPA. We help you prepare for the technical security requirements; formal audits and certifications are done by independent auditors or assessors. ### Do you perform SOC 2 audits? No. A SOC 2 report is issued by an independent CPA firm. We help with readiness: finding and fixing gaps in your security controls before the audit. ### Is this legal advice? No. We are an IT company, not a law firm. For legal questions about your obligations, talk to your attorney. ### What does a cybersecurity risk assessment include? An on-site review of your network edge (firewall, switch ports, remote access), physical security, network segmentation, Microsoft 365 and email security, endpoints (antivirus, updates, backups, BitLocker) and sign-in (two-factor authentication), plus vulnerability detection with Wazuh. ### How much does it cost? $1,000 per hour on site for businesses with up to 500 devices, and $2,500 per hour for businesses with more than 500 devices. The roadmap and timeline are included at no extra charge. ### Is the roadmap and timeline extra? No. Every risk assessment comes with a phased roadmap and timeline, delivered after the on-site visit, at no extra charge. ### What framework do you use? Our methodology uses principles from the NIST framework: identify assets, assess threats, analyze vulnerabilities, measure risk and plan mitigation. ### Do you use a vulnerability scanner? Yes. We use Wazuh to help find known vulnerabilities and missing patches as part of the assessment. ### What counts as a device? Anything we manage on your network: computers, laptops, servers, phones, printers and network equipment. Businesses with up to 500 devices pay the small and mid-sized business rate. ### How do I book an assessment? Book a free phone consultation online or call (510) 371-9468, Monday–Friday, 9 AM–5 PM. We use the call to understand your network and schedule the on-site visit. ### What is a cybersecurity risk assessment? A cybersecurity risk assessment is a structured review of your network, devices, accounts and data to find weaknesses, judge how likely and how damaging each one is, and decide what to fix first. Fasthuma IT Solutions & MSP does it on site, using principles from the NIST framework. ### How much does a cybersecurity risk assessment cost? On-site assessments are $1,000 per hour for businesses with up to 500 devices and $2,500 per hour for businesses with more than 500 devices. The roadmap and timeline are included at no extra charge. ### What do I get at the end of the assessment? A written report with an executive summary, each risk we found paired with a recommendation, and next steps. After the on-site visit you also get a phased roadmap and timeline for fixing the risks. ### Can you help if we have already been breached? Yes. Our incident response and forensics service comes on site, finds out how the attackers got in, presents a written report and helps patch the vulnerability. Start with our step-by-step guide to taking your network offline. ### Where are you located and which areas do you serve? Our office is at 42307 Osgood Rd, Suite B, Fremont, CA 94539. We work with businesses in Fremont and across the San Francisco Bay Area. ### Do you offer ongoing security monitoring? Yes, through our managed services. The Blaze plan adds Wazuh SIEM cybersecurity monitoring. See managed security and the plans on msp.fasthuma.com. ### Should I turn off computers that have been hacked? Not if you can avoid it. CISA advises disconnecting affected devices from the network (unplug the network cable, turn off Wi-Fi) and powering them down only if you cannot disconnect them, because shutting down can destroy evidence held in memory. See our step-by-step guide. ### What does cyber forensics involve? Forensics is the investigation of how a breach happened. We come on site, trace how the attackers got in, and present our findings in a written report. Then we help patch the vulnerability they used. ### Do you respond 24/7? No. Our hours are Monday–Friday, 9 AM–5 PM. During those hours, call (510) 371-9468 and we'll schedule an on-site visit as soon as possible. Outside business hours, book a free phone consultation and we'll get back to you as soon as possible. ### How much does incident response cost? $1,000 per hour on site for businesses with up to 500 devices, and $2,500 per hour for businesses with more than 500 devices. ### Should I report a cyber attack? CISA suggests reporting to CISA, your local FBI field office or the FBI's Internet Crime Complaint Center (IC3) at ic3.gov. CISA's 24/7 line is (888) 282-0870. ### Can I restore from backup straight away? Wait. CISA advises not rebuilding from backups until the malware that got in has been identified, otherwise you can be reinfected. We help you work out when it is safe to restore. ### Which plan includes Wazuh SIEM monitoring? Blaze and Inferno. Blaze adds Wazuh SIEM cybersecurity monitoring to everything in Flame, and Inferno adds Microsoft 365 Business Premium on workstations. ### Where can I see managed security pricing? Plan pricing is on msp.fasthuma.com. ### Do I need a risk assessment first? A risk assessment shows what to fix before monitoring starts, and the roadmap plans managed monitoring to begin right after the fixes. ### What is an IT refresh? An IT refresh replaces aging equipment, such as firewalls, switches, servers and workstations, with current hardware that gets security updates. We plan refreshes from the findings in your risk assessment. ### Which brands do you work with? We are a channel partner with Dell, Lenovo, Ubiquiti, Microsoft, Supermicro, Fortinet and RingCentral. ### How do you keep downtime low during upgrades? The work is done in phases. We put backups in place first, validate each phase before moving on, and keep old hardware running until services are confirmed on the new equipment. ### How is network security work priced? Per project. We quote it from the roadmap and timeline in your risk assessment, including any hardware and licensing. ### What happens after the upgrades? We can keep watch through our managed services: 24/7 remote monitoring, patch management, managed antivirus and, on the Blaze plan, Wazuh SIEM monitoring. See managed security. ## Related Fasthuma sites - Managed IT for businesses: https://msp.fasthuma.com/ - IT consulting for businesses: https://it.fasthuma.com/ - Computer repair for home users: https://cr.fasthuma.com/ - All Fasthuma sites: https://fasthuma.com/