/* ========================================================= SIGNET — Solutions (project-type work) ========================================================= */ const SOLUTIONS = [ { id: "website-development", category: "Web & Digital", scope: "Marketing site → web app", title: "Website development by the team that already runs your network.", summary: "Marketing sites, customer portals, internal tools, and lightweight web applications — designed, built, hosted, and supported by the same engineers who keep the rest of your IT running. Every project starts with discovery: we sit with stakeholders, map the goals to actual user flows, and write the information architecture before anyone opens a design tool. From there it's modern, responsive design tuned to your brand; clean front-end code (React, Next.js, or a CMS-driven stack when that's the right call); a CMS your marketing team can actually edit without a ticket; and a back-end with proper authentication, role-based access, and the integrations your business actually depends on — CRM, ERP, payment, scheduling, ConnectWise, e-signature. We bake in SEO from day one (semantic markup, structured data, sitemaps, Core Web Vitals tuning), wire up GA4 and conversion tracking that survives a cookie banner, and meet WCAG 2.2 AA so your site isn't an ADA complaint waiting to happen. Hosting lives in Azure, AWS, or Cloudflare — with TLS, WAF, automated backups, staging environments, and patching all included — and once you're live we stay on as your dev team: small enhancements without re-bidding, monthly performance reports, and a real human on the other end of the ticket.", highlights: [ { n: "Design → ship", l: "discovery → launch → support" }, { n: "CMS", l: "editor-friendly" }, { n: "A11y", l: "WCAG 2.2 AA" }, { n: "Core Web", l: "Vitals green" }, ], }, { id: "access-control", category: "Physical Security", scope: "Single door → multi-site", title: "Access control, designed around how your people actually move.", summary: "Cloud-managed access control built on Ubiquiti UniFi Access — no per-door subscriptions, no monthly platform fees. Mobile credentials, NFC unlock, granular schedules, and a real audit trail. We size the door count to your building, install the readers and controllers, integrate with your directory, and hand you a system your office manager can actually run.", href: "https://ui.com/us/en/door-access", highlights: [ { n: "Unifi Access", l: "subscription-free" }, { n: "Mobile", l: "& NFC unlock" }, { n: "AD/Entra", l: "identity sync" }, ], }, { id: "cctv", category: "Physical Security", scope: "1 → 2000+ cameras", title: "CCTV that records what matters and surfaces it in seconds.", summary: "IP-based video surveillance built on subscription-free Ubiquiti UniFi Protect — no per-camera cloud fees, footage stays on your NVR. We spec the cameras to the use case, plan the cable runs, configure smart motion zones and AI-driven person and vehicle search, and tune retention so storage isn't a runaway line item. License plate recognition cameras at gates, parking entrances, and drive-thrus — capture every plate that crosses the line, build allow- and watch-lists, and search history by plate number when something needs answering. When you need eyes on the feed around the clock, professional monitoring is available through our partner Sandru Monitoring — verified alarm response, live video review, and dispatch when something actually warrants it.", href: "https://ui.com/us/en/camera-security", highlights: [ { n: "UniFi Protect", l: "subscription-free" }, { n: "AI", l: "person & vehicle search" }, { n: "LPR", l: "plate capture & allow-lists" }, { n: "Monitoring", l: "optional via Sandru Monitoring" }, ], }, { id: "video-intercom", category: "Physical Security", scope: "Front door → multi-entry", title: "Video intercoms that ring the people who should answer.", summary: "Front-door and lobby video intercoms built on Ubiquiti UniFi Protect — visitors press a button, reception sees a live HD feed, talks back, and releases the door from a desk answering station, mobile app, or web console. Calls escalate through a roster so nobody's pressed against an empty front desk, every press is recorded alongside the rest of your camera footage, and the strike ties into the same UniFi Access doors you already have. For multi-tenant buildings, the included Signet phone line dials residents' cell phones or landlines directly from the directory — no resident app required, no per-unit telecom add-on. No per-station cloud fees, no separate platform to learn.", href: "https://ui.com/door-access/intercoms", highlights: [ { n: "Two-way", l: "HD video & audio" }, { n: "Dials residents", l: "free phone line included" }, { n: "Access integrated", l: "buzz to unlock" }, ], }, { id: "fleet-tracking", category: "Physical Security", scope: "5 → 500 vehicles", title: "Vehicle fleet tracking that keeps the rubber side down and the books straight.", summary: "GPS telematics across your trucks, vans, and field vehicles — live map view of where everyone is, automated mileage logs that hold up to an audit, and driver-behavior reports flagging hard braking, speeding, idling, and harsh cornering. Geofence the yard so you know when crews land on a job site, and pull IFTA-ready reports without anyone tabbing through receipts at the end of the quarter.", highlights: [ { n: "Real-time", l: "GPS map + history" }, { n: "Auto-logged", l: "mileage · IFTA-ready" }, { n: "Driver risk", l: "speed · braking · idling" }, ], }, { id: "conference-av", category: "Audio Visual", scope: "Huddle room → boardroom", title: "Conference room AV that works on the first click.", summary: "One-tap join, room-aware cameras, voice-tracking microphones, and displays sized to the room. We design rooms certified for Microsoft Teams Rooms or Zoom Rooms, run the cabling cleanly, and program the touch panel so guests don't have to flag down IT five minutes in.", highlights: [ { n: "MTR", l: "& Zoom Rooms" }, { n: "1-tap", l: "join experience" }, { n: "Zero", l: "cables on the table" }, ], }, { id: "overhead-audio", category: "Audio Visual", scope: "Single zone → multi-site", title: "In-ceiling music and paging, zoned the way the building actually works.", summary: "Commercial-grade overhead speakers laid out for even coverage and tuned to the room — not the contractor-bag speakers leftover from the buildout. Independent zones so the lobby plays one playlist, the warehouse plays another, and the boardroom stays quiet. Licensed background music from SiriusXM for Business, Mood Media, or Soundtrack so you're not playing Spotify Personal at a public venue and waiting for the ASCAP letter. Overhead paging from any desk phone, softphone, or front-desk station — dial the zone, make the announcement, done. Emergency and life-safety paging integrated where code requires it. One system, one volume knob per zone, one ticket line when something needs us.", highlights: [ { n: "Zoned", l: "independent per area" }, { n: "Licensed", l: "SiriusXM · Mood · Soundtrack" }, { n: "Page anywhere", l: "from any phone or station" }, ], }, { id: "digital-signage", category: "Audio Visual", scope: "Single screen → multi-site", title: "Digital signage that updates itself when the message changes.", summary: "Lobbies, breakrooms, retail floors, conference rooms — displays driven by Yodeck for content management. We spec the screens and players, mount and cable everything cleanly, and stand up the playlists, schedules, and user permissions so marketing or operations can swap content without filing a ticket.", href: "https://www.yodeck.com/", highlights: [ { n: "Yodeck", l: "content management" }, { n: "Remote", l: "playlist updates" }, { n: "Multi-site", l: "centrally managed" }, ], }, { id: "custom-dashboards", category: "Web & Digital", scope: "Single view → executive cockpit", title: "Custom dashboards that compile numbers you can actually trust.", summary: "We build dashboards on top of the systems you already pay for — QuickBooks, Salesforce, HubSpot, Jira, Asana, Shopify, ConnectWise, Power BI, you name it. Financials and cash position, project status and burn, sales pipeline, helpdesk SLAs, manufacturing floor metrics, fleet location, donor and membership health for nonprofits, lobby and conference-room status — whatever your team is screenshotting into a deck every Friday. Refreshed live, scoped by role, viewable on the wall TV or the phone in line for coffee.", highlights: [ { n: "Any source", l: "QBO · Salesforce · HubSpot · Jira · Power BI" }, { n: "Live", l: "auto-refresh · role-scoped views" }, { n: "Wall TV", l: "or phone-sized · whichever fits" }, ], }, { id: "ai-assistants", category: "Web & Digital", scope: "Pilot team → company-wide", title: "Custom AI assistants, trained on the knowledge your company actually runs on.", summary: "Purpose-built assistants — powered by Anthropic's Claude — and grounded in your own documents, drives, ticketing systems, CRM, and historical work, not the open internet. We stand up the retrieval layer over SharePoint, Google Drive, Confluence, network shares, Salesforce, HubSpot, and ConnectWise; wire in role-based permissions so the assistant only surfaces what each user is already allowed to see; and deliver it inside Teams, Slack, or a branded web chat your team already opens. Outputs land as usable artifacts — proposal drafts in your template, statement-of-work line items, redlined contracts, ticket summaries — not chat transcripts to copy-paste. Because the whole company shares one pooled, metered backend instead of a per-seat license per employee, it's the most cost-effective way to put real AI in front of every person on staff — hosted in your tenant, audited, and tuned by the same engineers who keep your network running.", highlights: [ { n: "Claude", l: "by Anthropic" }, { n: "Pooled", l: "metered · whole-company" }, { n: "Internal", l: "role-scoped retrieval" }, ], }, { id: "structured-cabling", category: "Infrastructure", scope: "Single suite → full floor", title: "Structured cabling, labeled and documented like an engineer wishes it was.", summary: "Cat6A and fiber runs pulled to industry standard, terminated in a rack we'd be happy to take a photo of. Every drop is tested, labeled, and recorded in a port map you can hand to the next tech who walks in — including us, ten years from now.", highlights: [ { n: "Cat6A", l: "& OM4 fiber" }, { n: "Labeled", l: "to the port" }, { n: "Tested", l: "every drop" }, ], }, { id: "office-buildout", category: "Infrastructure", scope: "New office → relocation", title: "New office buildouts, networked end to end before the furniture lands.", summary: "We sit at the GC table from day one. Cabling, IDF/MDF closets, Wi-Fi heatmaps, access control, CCTV, AV, printers, and circuits — all sequenced against the construction schedule so move-in day means plugging in laptops, not chasing punch lists.", highlights: [ { n: "End-to-end", l: "scope of work" }, { n: "GC-coord.", l: "on your team" }, { n: "Day-1", l: "ready" }, ], }, { id: "wifi-design", category: "Infrastructure", scope: "Office → warehouse", title: "Wi-Fi designed from a heatmap, not a hope.", summary: "Predictive and on-site surveys to place access points where coverage actually needs to be — not where the ceiling tile happened to land. UniFi or Meraki, segmented SSIDs, guest isolation, and seamless roaming so the meeting doesn't drop when someone walks to the kitchen.", highlights: [ { n: "Survey", l: "predictive + on-site" }, { n: "Wi-Fi 6E", l: "& Wi-Fi 7 ready" }, { n: "Seamless", l: "roaming" }, ], }, { id: "email-migration", category: "Communications", scope: "10 → 5,000 mailboxes", title: "Email migrations that finish on a Sunday and nobody notices Monday.", summary: "Cutovers between Microsoft 365, Google Workspace, GoDaddy, iCloud, and on-prem Exchange — planned around your calendar, not ours. Discovery and mailbox sizing, domain and DNS choreography, MX cutover with coexistence so mail never bounces, and mobile re-profiling for every device. Calendars, contacts, shared mailboxes, distribution lists, and public folders come along — not just the inbox.", highlights: [ { n: "5 platforms", l: "M365 · Google · GoDaddy · iCloud · Exchange" }, { n: "Zero", l: "downtime · MX coexistence" }, { n: "Everything", l: "calendars + contacts preserved" }, ], }, { id: "voip-phones", category: "Communications", scope: "5 → 500 seats", title: "Cloud phone systems that don't feel like 2008.", summary: "Microsoft Teams Phone — provisioned with your numbers ported, auto-attendants written, call queues tuned, and desk phones or softphones deployed across your team. Reporting and call recording built in. Faxing handled too, when the industry still demands it. Carrier circuits and SIP trunking delivered through our partnership with Strong Fiber, so the dial tone, the porting, and the support all run through one accountable team.", href: "https://www.microsoft.com/en-us/microsoft-teams/microsoft-teams-phone", highlights: [ { n: "Teams", l: "Phone certified" }, { n: "Strong Fiber", l: "telco partner" }, { n: "E911", l: "compliant" }, ], }, { id: "print-tracking", category: "Infrastructure", scope: "Single MFP → enterprise fleet", title: "Print tracking that turns the printer into a line item you can actually read.", summary: "PaperCut, deployed across your printer fleet — secure release at the device, per-user and per-department quotas, color-vs-mono cost tracking, and reports that finally answer \"who printed 4,000 pages last month.\" Find-me printing so jobs follow the user to whichever MFP they tap, and pull-print held until the right badge taps in. Pays for itself in toner and paper inside the first quarter.", href: "https://www.papercut.com/products/mf/", highlights: [ { n: "PaperCut", l: "MF / NG" }, { n: "Secure release", l: "badge / PIN" }, { n: "Cost reports", l: "by user & dept" }, ], }, { id: "multifamily-internet", category: "Infrastructure", scope: "Single building → portfolio", title: "Managed whole-building internet, one bill for the property.", summary: "A single-payer model for multi-family buildings — the property pays one wholesale bill, residents get fast, included Wi-Fi from day one. Cuts total internet spend across the building by roughly 60% versus every unit buying retail service. We engineer the building with redundant uplinks from two carriers, automatic failover, and segmented per-unit networks so neighbors never see each other. Move-in is a QR code, not a four-day Comcast appointment.", highlights: [ { n: "~60%", l: "lower vs. retail" }, { n: "Redundant", l: "dual-carrier uplinks" }, { n: "Per-unit", l: "isolated networks" }, ], }, { id: "building-automation", category: "Infrastructure", scope: "Single suite → multi-site", title: "Building automation that catches problems before the floor does.", summary: "Leak detection under the server room slab and behind the breakroom sink. Temperature and humidity sensors in the IDF, on the lab fridge, in the wine cellar. Motion sensors that flag after-hours activity where it shouldn't be. Sensors connect to your network, alerts route to the right people on the right channel — text, email, ticket — and history lands in a dashboard so insurance and compliance never go looking. Monitored 24/7 by our NOC, so even at 3am on a Sunday somebody is watching.", highlights: [ { n: "Leak", l: "& water sensors" }, { n: "Temp/RH", l: "monitoring + alerts" }, { n: "Motion", l: "after-hours alerts" }, { n: "24/7", l: "NOC monitored" }, ], }, { id: "vdi", category: "Web & Digital", scope: "Single department → enterprise", title: "Virtual desktop infrastructure so the desk follows the user, not the other way around.", summary: "Centrally-hosted Windows desktops your team reaches from anywhere — the office Chromebox, a laptop on the road, a tablet at a job site, a personal machine working from home. We design and stand up the VDI on Azure Virtual Desktop, Windows 365, or on-prem hypervisor depending on what fits the workload and the budget; size the host pools to actual usage so you're not paying for ghost capacity; and join everything to your identity stack with Conditional Access, MFA, and role-based app delivery. Data and IP stay on the server side — the endpoint is just a screen — which simplifies BYOD, contractor access, regulated data (PHI, CJIS, ITAR), and the laptop someone leaves in a rideshare. Profiles, app packages, GPU pools for CAD/design, and printer mapping all handled as part of the build; ongoing patching and image updates handled by the same team.", highlights: [ { n: "AVD · W365", l: "or on-prem hypervisor" }, { n: "BYOD-safe", l: "data stays server-side" }, { n: "GPU pools", l: "for CAD & design" }, { n: "Identity", l: "SSO · MFA · Conditional Access" }, ], }, { id: "data-recovery", category: "Web & Digital", scope: "Single drive → enterprise RAID", title: "Data recovery for the day the drive doesn't spin up.", summary: "When a hard drive stops mounting, a RAID array drops more disks than it can rebuild, or a thumb drive comes back from the field unreadable, we work the problem methodically — logical recovery in our lab first, software-level reconstruction of corrupted file systems and rebuilt parity, and full forensic imaging so the original drive is never the working copy. If the drive is physically damaged — clicking heads, seized motors, fire or water exposure, snapped USB stick — we ship it to our partner forensics lab for clean-room platter swaps and advanced reconstruction, then bring the recovered data back to you on encrypted media. Photos, accounting files, project archives, mailbox stores, virtual machine disks; spinning disks, SSDs, NVMe, thumb drives, SD cards. We tell you upfront what's recoverable, what isn't, and what it'll cost before anyone touches a screwdriver. Once your data is back, we'll design and stand up a real backup system — image-level local backups, offsite replication, retention policies, and tested restores — so you're never one bad sector away from losing it again.", highlights: [ { n: "HDD · SSD", l: "NVMe · thumb · SD" }, { n: "RAID", l: "rebuild & parity recovery" }, { n: "Clean room", l: "forensics lab partner" }, { n: "Backups", l: "designed & tested after" }, ], }, { id: "cmmc-consulting", category: "Compliance", scope: "Level 1 self-attest → Level 2 C3PAO", title: "CMMC consultation for the DoD contractors who actually have to pass.", summary: "Cybersecurity Maturity Model Certification is no longer a future problem — if you bid on DoD work or sit in a prime's supply chain, the clock is running. DFARS 252.204-7012 already requires NIST SP 800-171 compliance and incident reporting; CMMC is how the Department verifies it. We start with a gap assessment against the 110 NIST SP 800-171 controls (or the 17 Level 1 practices, if that's your scope), map every finding to the specific systems and processes that own it, and build a System Security Plan and Plan of Action & Milestones that an assessor will actually accept. From there we do the remediation work: tenant hardening in M365 GCC or GCC High, FIPS-validated encryption, MFA enforcement, logging and SIEM, incident response playbooks, media handling, physical and personnel controls, and the policy set behind all of it. We coach your team through the self-assessment, or stand alongside you for the C3PAO assessment when Level 2 is required. CUI-aware from day one — not bolted on after the auditor flags it.", highlights: [ { n: "Levels 1 & 2", l: "self-attest → C3PAO" }, { n: "DFARS 7012", l: "& NIST 800-171 mapped" }, { n: "GCC / GCC High", l: "tenant build & harden" }, { n: "SSP & POA&M", l: "auditor-ready artifacts" }, ], }, { id: "gcc-migration", category: "Compliance", scope: "Single tenant → multi-domain", title: "Public to GCC cloud migrations for orgs that can't stay in the commercial tenant.", summary: "Standard Microsoft 365 Commercial wasn't built for Controlled Unclassified Information, FedRAMP-required workloads, or the contract clauses that show up in DoD, federal civilian, state, local, and CJIS work. GCC, GCC High, and DoD tenants live in segregated cloud regions with US-only data residency, screened US-person support staff, FedRAMP High / IL5 baselines, and the DFARS 7012, ITAR, EAR, and CJIS coverage your contracting officer is asking about. We migrate you across the boundary cleanly — discovery and licensing analysis, tenant provisioning, mailbox and OneDrive cutover with PST and content reconciliation, Teams chat and channel migration, SharePoint sites with permissions preserved, Entra identity and SCIM rebuild, Intune re-enrollment, and the third-party app re-licensing that usually surprises people. CUI is identified and labeled along the way, retention and DLP policies land before the data does, and we keep the commercial tenant available read-only during the transition so nothing falls in a gap.", highlights: [ { n: "GCC · GCC High", l: "& DoD tenants" }, { n: "CUI · ITAR · CJIS", l: "boundary built right" }, { n: "Mail · Files · Teams", l: "preserved & labeled" }, { n: "Identity rebuild", l: "Entra · Intune · SCIM" }, ], }, { id: "hipaa-consulting", category: "Compliance", scope: "Solo practice → clinics", title: "HIPAA consultation that turns the binder of policies into a tenant you can actually defend.", summary: "HIPAA isn't a sticker on the door — the Privacy, Security, and Breach Notification Rules each carry concrete technical and administrative requirements, and OCR audits and ransomware notifications both end at the same risk analysis you should already have on file. We start with a full risk assessment against the HIPAA Security Rule (45 CFR §§ 164.308–164.312), inventory every system that touches ePHI — EHR, imaging, billing, email, file shares, backup, mobile devices, copiers, and the practice management vendors behind them — and identify where unencrypted PHI is moving or sitting. From there we remediate: encryption at rest and in transit, role-based access and unique user IDs, automatic logoff, audit logging, MDM on phones and tablets, secure messaging, and the policy + workforce training set behind it. Business Associate Agreements get reviewed and reconciled. We sign a BAA with you, host PHI workloads in HIPAA-eligible Microsoft 365 and Azure configurations, and stand alongside you if OCR or a breach response ever comes knocking. Built for medical practices, dental, behavioral health, home health, long-term care, and the business associates serving them.", highlights: [ { n: "Security Rule", l: "§§ 164.308–164.312" }, { n: "Risk analysis", l: "& remediation roadmap" }, { n: "BAA", l: "signed · vendors reconciled" }, { n: "ePHI", l: "encrypted · logged · trained" }, ], }, { id: "pci-consulting", category: "Compliance", scope: "SAQ A merchant → Level 1 enterprise", title: "PCI DSS consultation that shrinks the scope before it eats your budget.", summary: "Every business that takes a card is in PCI DSS scope — the only question is how much of your network the auditor gets to look at. We start by mapping the cardholder data environment: where the PAN is captured, where it flows, where it sits, and every system one hop away. Then we cut scope hard — P2PE terminals so plaintext card data never touches your network, tokenization at the processor, network segmentation that holds up under review, and getting e-commerce flows onto hosted payment fields so you qualify for SAQ A instead of SAQ D. From there we do the remediation work against the 12 PCI DSS v4.0 requirements: firewall and segmentation rules, default-password sweeps, encryption in transit, vulnerability scanning and ASV coordination, file integrity monitoring, logging and 12-month retention, MFA into the CDE, and the policy + awareness training behind it. We prep your Self-Assessment Questionnaire, coordinate with your QSA when one's required, and document the compensating controls that make the report defensible. For retail, restaurants, hotels, e-commerce, healthcare billing, and any service business that runs cards.", highlights: [ { n: "v4.0", l: "12 requirements mapped" }, { n: "Scope cut", l: "P2PE · tokenize · segment" }, { n: "SAQ", l: "A → D-Merchant prep" }, { n: "ASV scans", l: "& QSA coordination" }, ], }, { id: "soc2-consulting", category: "Compliance", scope: "Type I readiness → Type II report", title: "SOC 2 consultation for SaaS companies whose customers stopped asking nicely.", summary: "When your enterprise pipeline is gated by a vendor security questionnaire and the line item is \"SOC 2 Type II report,\" you don't have a year to figure it out from scratch. We run a readiness assessment against the AICPA Trust Services Criteria — Security is required, and we'll scope in Availability, Confidentiality, Processing Integrity, or Privacy depending on what your contracts actually demand. From there we write the policy set (access, change management, vendor management, incident response, BCP/DR, secure SDLC) in language an auditor accepts, and stand up the operating controls so they generate evidence on their own: SSO with MFA, role-based access reviews, ticketed change approvals, vulnerability scanning, log aggregation, background checks, and onboarding/offboarding workflows. We pick the auditor with you, manage the evidence room and PBC list during fieldwork, sit in interviews alongside your team, and translate findings into remediations that don't tank engineering velocity. Type I in months one–three; Type II observation window starts the day controls go live.", highlights: [ { n: "Trust Criteria", l: "Security + scoped TSCs" }, { n: "Type I → II", l: "readiness → audit support" }, { n: "Policies", l: "written & operationalized" }, ], }, { id: "iso27001-consulting", category: "Compliance", scope: "Stage 1 gap → surveillance audits", title: "ISO/IEC 27001 consultation, scoped so the ISMS doesn't outweigh the company.", summary: "ISO 27001 is the international standard your overseas customers, your bank, and your largest enterprise prospects are increasingly asking for in writing. We build an Information Security Management System sized to the business — not a 400-page binder borrowed from a Fortune 500. Scope definition first: which products, locations, and data flows live inside the ISMS, and which sit cleanly outside. Then the mandatory clauses 4–10: context of the organization, leadership commitment, risk assessment and treatment methodology, Statement of Applicability against the 93 Annex A controls (2022 revision), measurable objectives, internal audit program, and management review cadence. We implement the Annex A controls that actually map to your environment — access, cryptography, supplier relationships, secure development, incident management — stand up the document control and risk register the registrar will ask for, and run the internal audit and management review at least once before stage 1. Then we coordinate the certification body, sit in the audits with you, and keep the ISMS alive through surveillance years 1 and 2 and the year-3 recertification. Pairs cleanly with an existing SOC 2 program — most controls are shared.", highlights: [ { n: "Annex A 2022", l: "93 controls scoped" }, { n: "ISMS", l: "clauses 4–10 stood up" }, { n: "Stage 1 & 2", l: "+ surveillance support" }, { n: "Maps to SOC 2", l: "shared control set" }, ], }, { id: "cjis-consulting", category: "Compliance", scope: "Single agency → multi-jurisdiction", title: "CJIS consultation for the agencies and vendors who touch criminal justice information.", summary: "If you store, process, or transmit Criminal Justice Information — NCIC, III, CHRI, fingerprints, mugshots, dispatch data — the FBI CJIS Security Policy applies, and your state's CJIS Systems Officer is the one who decides whether you're compliant. We work both sides: the law-enforcement agency that owns the data, and the vendor or integrator whose product is in the path. Personnel: fingerprint-based background checks and CJIS Security Awareness training for every role with logical or physical access, tracked and re-certified on schedule. Technical: advanced authentication (CJIS-grade MFA) for every CJI session, FIPS 140-validated encryption in transit and at rest, audit logging with the right retention, session lock and screen timeout, and segregated storage that keeps CJI out of any system that isn't covered. Physical: secure-area definitions, visitor controls, and media handling. Agreements: Management Control Agreements, CJIS Security Addendums, and signed Information Exchange Agreements with every party in the chain. We coordinate with your CSO/ISO, prep you for the state audit, and stand alongside through findings remediation. Built for police, sheriffs, courts, corrections, dispatch centers, and the RMS/CAD/body-cam/forensics vendors serving them.", highlights: [ { n: "CJIS Policy", l: "v5.9+ mapped" }, { n: "Advanced auth", l: "CJIS-grade MFA" }, { n: "Personnel", l: "prints · training · attestation" }, ], }, { id: "cui-training", category: "Training", scope: "Cleared roles → full workforce", title: "CUI handling training so the contract doesn't end with a 7012 breach notification.", summary: "Controlled Unclassified Information is more than a banner on a SharePoint site. Anyone who creates, receives, transmits, or stores CUI has obligations under 32 CFR Part 2002, the NIST 800-171 controls, and DFARS 252.204-7012 — and a single mishandled file in the wrong inbox can flow back to a breach report, a contract termination, or a False Claims Act exposure. We train your people on the actual lifecycle: how to identify CUI at the source (CUI Registry categories, ITAR, EAR, CTI, basic vs specified, decontrol triggers), how to label it correctly (banner markings, portion markings, CUI/SP-XXX subcategories), how to protect it at rest and in motion (approved encryption, FIPS 140-validated, GCC High vs commercial, what \"need to know\" actually means in practice), how to send it (encrypted email, SFTP with the right safeguards, secure file transfer platforms — and what to NEVER use), and how to handle the moments that always trip people up: contractors leaving, laptops in airports, screenshots in Teams chats, the inherited email thread that suddenly contains CUI. Role-based delivery for engineering, contracts, IT admins, and executives, with practical scenarios drawn from your actual program. Pairs with our CMMC and GCC migration engagements; required for most Level 2 assessments.", highlights: [ { n: "32 CFR · 800-171", l: "+ DFARS 7012" }, { n: "Identify → send", l: "full lifecycle" }, { n: "CMMC L2", l: "assessment-ready" }, ], }, { id: "ai-prompt-training", category: "Training", scope: "Single team → company-wide", title: "AI & prompt engineering training so your team gets real work out of the tools you're paying for.", summary: "Most companies pay for ChatGPT or Copilot seats and then quietly watch them go unused, or worse, used badly. We teach your team to actually drive these tools — prompt structure that gets useful output the first try, when to ask for revisions vs starting fresh, how to give the model the right context (documents, examples, constraints, role), and how to chain steps for longer tasks. Role-specific tracks: sales learns proposal drafting and discovery prep, engineering learns code review and documentation, ops learns SOP authoring and ticket triage, finance learns variance analysis and policy lookup. Equally important, we cover the boundaries: what data should never go into a public model, how Microsoft 365 Copilot / Claude Enterprise / ChatGPT Team handle confidentiality differently, when to use your custom in-tenant assistant instead, how to spot hallucinations and verify outputs before sending them downstream, and the prompt-injection and data-exfiltration risks you should actually plan for. Delivered as live workshops with hands-on labs in your own tools, plus a reference library of vetted prompt templates for the workflows we identify together. Pairs cleanly with our Custom AI Assistants engagement.", highlights: [ { n: "Hands-on", l: "in your own tools" }, { n: "Role tracks", l: "sales · eng · ops · finance" }, { n: "Safety", l: "data boundaries & hallucinations" }, { n: "Prompt library", l: "vetted templates" }, ], }, { id: "computer-literacy", category: "Training", scope: "1-on-1 → cohort onboarding", title: "Basic computer literacy training for the people whose job didn't used to require it.", summary: "Not every new hire grew up on a keyboard. We run patient, judgment-free sessions that meet people where they are: how Windows actually works — file explorer, Save vs Save As, where your downloads go and how to find them; how to use Microsoft 365 — Outlook conversations, Teams chat vs channels, Word and Excel basics, OneDrive and SharePoint without losing anything; what the address bar does, what tabs are, and why \"is this link real?\" is a question worth asking; printers, scanners, screen sharing, video calls, calendar invites, and the dozen small interactions modern work assumes you already know. Delivered as 1-on-1 sessions or small cohorts, in person or remote, with hand-out cheat sheets people can actually keep. Pairs naturally with new-hire orientation and with security awareness training — the same person who can confidently find a file is the same person who can confidently spot a phishing email.", highlights: [ { n: "1-on-1", l: "or small cohorts" }, { n: "In person", l: "or remote sessions" }, { n: "Cheat sheets", l: "to take home" }, ], }, { id: "security-awareness-training", category: "Training", scope: "Annual rollout → ongoing program", title: "Cybersecurity awareness training built around your business, not a generic LMS playlist.", summary: "Off-the-shelf awareness videos are easy to ship and easy to ignore. We build a custom training program that names your actual tools, your actual processes, your actual people — finance learning how wire fraud targets *your* AP workflow in QuickBooks, engineering learning how source-code exfiltration looks on *your* GitHub repos, the front desk learning how to handle the visitor management *your* HIPAA scope requires. Curriculum is mapped to whatever frameworks you live under — CMMC AT.L2-3.2.x, HIPAA 164.308(a)(5), PCI 12.6, SOC 2 CC1.4, ISO 27001 A.6.3 — so the same training session knocks out four audit requirements at once. Delivered as a mix of recorded modules with role-specific tracks, live quarterly tabletops with leadership, and just-in-time micro-lessons triggered by phishing simulation clicks. Completion, scoring, and certificates land in a dashboard you can export for the assessor. Refreshed annually to cover whatever the threat landscape and your environment actually changed.", highlights: [ { n: "Custom", l: "to your tools & processes" }, { n: "Role-based", l: "tracks per department" }, { n: "Certificates", l: "audit-exportable" }, ], }, { id: "phishing-simulation", category: "Training", scope: "5 → 5000+ seats", title: "Phishing simulation that turns the click-prone into the click-suspicious.", summary: "Realistic phishing campaigns sent to your team on a schedule you control — fake invoice notifications, OneDrive share lures, fake password resets, fake CEO wire requests, the works — each one tracked per user. When someone clicks, they don't get shamed; they get redirected to a short, focused training moment that explains exactly what they missed, and the result lands in a dashboard you can show the auditor (or the board) on demand. We run the program end to end: campaign authoring, sender-domain warmup, allowlist coordination with your mail filter so simulations actually land, monthly cadence, role-targeted templates (finance gets wire fraud, execs get whaling, ops gets vendor impersonation), and quarterly executive reports. Pairs with annual Security Awareness training video modules — CMMC, HIPAA, PCI, and SOC 2 all expect both. Built on KnowBe4 or Proofpoint depending on your stack; standalone or bundled inside a managed services agreement.", highlights: [ { n: "Just-in-time", l: "micro-training on click" }, { n: "Reporting", l: "audit-ready dashboards" }, { n: "KnowBe4", l: "or Proofpoint" }, ], }, { id: "fixed-wireless", category: "Infrastructure", scope: "Backup link → primary WAN", title: "Fixed wireless and Starlink, installed like real infrastructure.", summary: "When the fiber order slips six months or the building just doesn't have it, we bring the internet to you. Starlink Business and licensed fixed-wireless links — properly mounted, grounded, and aimed; pulled through conduit, not duct-taped to a downspout. Licensed microwave point-to-point and point-to-multipoint configurations to bridge campuses, connect outbuildings, or hub multiple remote sites back to a central tower — engineered with a path study, FCC coordination where required, and the right antennas for the distance and weather. Configured as primary WAN or as automatic failover behind your existing circuit, with SD-WAN failover so a dropped link doesn't drop the call.", href: "https://www.starlink.com/business", highlights: [ { n: "Starlink", l: "Business + Roam" }, { n: "Auto-failover", l: "SD-WAN tuned" }, { n: "Grounded", l: "& weatherproofed" }, ], }, { id: "hotel-hospitality", category: "Retail & Hospitality", scope: "Boutique → full-service", title: "Hotel guest Wi-Fi and business centers, run like an amenity.", summary: "Property-wide guest Wi-Fi engineered for the way guests actually use it — branded splash pages, PMS integration for room-number sign-on, tiered bandwidth for streaming and premium rooms, and a back-of-house network kept properly separate. Business center PCs locked down for kiosk use, with session reset between guests, secure print and scan, and a single ticket line for the front desk when something needs us.", highlights: [ { n: "PMS", l: "splash & sign-on" }, { n: "Wi-Fi 6E", l: "every floor" }, { n: "Kiosk-mode", l: "guest PCs" }, ], }, { id: "point-of-sale", category: "Retail & Hospitality", scope: "Counter → multi-location", title: "Point of sale that rings the first sale on opening day.", summary: "Retail, restaurant, and hospitality POS designed around how your front-of-house actually runs — terminals, card readers, kitchen printers, cash drawers, and the network behind them. We spec the hardware, configure the menu or catalog, integrate payments and accounting, and train your team before the doors open. Hardened Wi-Fi and a backup cellular failover so a downed circuit doesn't down the register.", highlights: [ { n: "EMV/NFC", l: "PCI-DSS ready" }, { n: "Offline mode", l: "rings through outages" }, { n: "QBO/Xero", l: "accounting sync" }, ], }, ]; // Placeholder visual — abstract gold-on-midnight blueprint motif. // Variants keyed by category so each card reads differently at a glance. const SolutionPlaceholder = ({ category, id }) => { // Pick a motif per category — simple geometric "blueprint" treatments. const motif = (() => { if (category === "Physical Security") return "security"; if (category === "Audio Visual") return id === "overhead-audio" ? "audio" : "av"; if (category === "Communications") return "av"; if (category === "Web & Digital") return "web"; if (category === "Retail & Hospitality") return "pos"; if (category === "Compliance") return "compliance"; if (category === "Training") return id === "phishing-simulation" ? "training" : id === "computer-literacy" ? "literacy" : id === "ai-prompt-training" ? "prompt" : id === "cui-training" ? "cui" : "awareness"; if (id === "fixed-wireless") return "wireless"; if (id === "data-recovery") return "recovery"; if (id === "vdi") return "vdi"; if (id === "gcc-migration") return "gcc"; if (id === "hipaa-consulting") return "hipaa"; if (id === "pci-consulting") return "pci"; if (id === "soc2-consulting") return "soc2"; if (id === "iso27001-consulting") return "iso"; if (id === "cjis-consulting") return "cjis"; if (id === "building-automation") return "sensors"; if (id === "hotel-hospitality") return "hotel"; if (id === "multifamily-internet") return "multifamily"; if (id === "print-tracking") return "print"; if (id === "email-migration") return "email"; if (id === "custom-dashboards") return "dash"; if (id === "ai-assistants") return "ai"; if (id === "fleet-tracking") return "fleet"; return "infra"; })(); return ( {/* warm glow */} {motif === "security" && ( {/* floor plan rectangle */} {/* door icons */} {[{x:50,y:90},{x:160,y:60},{x:270,y:130},{x:110,y:160}].map((d,i) => ( ))} {/* camera cone */} )} {motif === "av" && ( {/* display */} {/* table */} {/* mic pucks */} {[120, 160, 200].map((x) => ( ))} )} {motif === "web" && ( {/* browser frame */} {[60, 70, 80].map((x) => ( ))} {/* content lines */} )} {motif === "fleet" && ( {/* map background — abstract street grid */} {/* curving route */} {/* geofenced job site */} JOB SITE {/* current vehicle pin */} {/* truck body */} {/* wheels */} {/* additional fleet vehicles */} {/* HQ pin start */} YARD {/* speedometer chip top-right */} SPD 62 mph )} {motif === "dash" && ( {/* dashboard frame */} {[48, 56, 64].map((x) => ( ))} {/* big KPI card top-left */} $1.24M REVENUE · MTD {/* line chart top-right */} {[6, 22, 38, 56, 74, 92, 116].map((x) => ( ))} {/* small donut bottom-left */} 72% {/* progress bars middle */} {[ { l: 90, v: 70 }, { l: 90, v: 42 }, { l: 90, v: 56 }, ].map((b, i) => ( ))} {/* bar chart bottom-right */} {[ { x: 0, h: 14 }, { x: 8, h: 22 }, { x: 16, h: 10 }, { x: 24, h: 28 }, { x: 32, h: 18 }, { x: 40, h: 24 }, ].map((b, i) => ( ))} )} {motif === "email" && ( {/* source envelope (left) */} FROM {/* destination envelope (right) — slightly larger & filled */} TO {/* migration arrow */} {/* small envelopes flowing across the path */} {/* platform tags above each envelope */} GOOGLE M365 {/* secondary platform chips, hovering — variety */} GODADDY ICLOUD EXCHANGE WORKSPACE {/* status check */} )} {motif === "print" && ( {/* MFP body */} {/* top scanner glass */} {/* control panel screen */} {/* control buttons */} {/* paper trays */} {/* page emerging from output tray */} {/* badge tap indicator near control panel */} TAP {/* bar chart in upper-right — usage report */} {[ { x: 4, h: 10 }, { x: 14, h: 22 }, { x: 24, h: 14 }, { x: 34, h: 28 }, ].map((b, i) => ( ))} )} {motif === "multifamily" && ( {/* apartment building — 5 stories, 4 units wide */} {[0,1,2,3,4].map((row) => ( {[0,1,2,3].map((col) => ( ))} ))} {/* entrance band */} {/* MDF / wholesale handoff node */} {[-10, -2, 6].map((y) => ( ))} MDF {/* two redundant uplinks from carriers */} {/* uplink A — solid */} A {/* uplink B — dashed alt path */} B {/* trunk from building to MDF */} {/* small data pulse */} )} {motif === "hotel" && ( {/* hotel facade — stacked rooms */} {[0,1,2,3].map((row) => ( {[0,1,2,3].map((col) => ( ))} ))} {/* entrance */} {/* Wi-Fi waves emitting from top right */} {/* business center workstation */} {/* monitor */} {/* stand */} {/* keyboard */} {/* corner ticks already drawn outside */} {/* connecting line from Wi-Fi to building */} )} {motif === "sensors" && ( {/* floor plan */} {/* doorway gaps */} {/* leak/water sensor — droplet */} {/* temp sensor — thermometer */} {/* motion sensor — radiating cone */} {/* secondary sensor dot */} {/* alert pulse indicator at top-right corner */} {/* connection lines from sensors to corner hub */} )} {motif === "wireless" && ( {/* horizon line */} {/* satellite arcs */} {/* satellite */} {/* downlink beam */} {/* dish on roof */} {/* building silhouette */} {/* signal arcs from dish */} )} {motif === "pos" && ( {/* counter line */} {/* tablet POS on stand */} {/* screen content lines */} {/* stand */} {/* card reader */} {/* receipt printer */} {/* receipt curl */} )} {motif === "ai" && ( {/* source document stack (left) — knowledge base */} {[0, 1, 2].map((i) => ( ))} KNOWLEDGE {/* assistant node (center) — hex with brain dot */} {/* inner cluster of nodes */} ASSISTANT {/* input flow lines docs → assistant */} {/* output flow line assistant → result */} {/* output document (right) — proposal */} {/* logo block */} PROPOSAL {/* heading + content lines */} {/* line-item table */} DRAFT v1 {/* source tag chips floating top */} SHAREPOINT DRIVE CRM {/* permission/lock indicator */} SCOPED )} {motif === "audio" && ( {/* ceiling grid (drop-ceiling tiles) */} {[40, 70, 100, 130, 160].map((y) => ( ))} {[50, 100, 150, 200, 250].map((x) => ( ))} {/* speaker 1 — zone A (lobby) */} {/* sound waves */} ZONE A {/* speaker 2 — zone B (warehouse) — paging active */} {/* louder sound waves */} ZONE B {/* speaker 3 — zone C (small, quiet) */} ZONE C {/* desk phone bottom-left initiating page */} {/* base */} {/* handset */} {/* keypad dots */} PAGE {/* signal line from phone to active speaker */} {/* music note chip top-right */} )} {motif === "recovery" && ( {/* HDD chassis */} {/* mounting holes */} {/* platter */} {/* recovered sector arc */} {/* damaged/missing sector arc — dashed */} {/* head actuator arm */} {/* head tip */} {/* PCB connector strip */} {/* recovered data card (right) — file list */} {/* header */} RECOVERED {/* file rows */} {[20, 32, 44, 56, 68, 80, 92].map((y, i) => ( {/* check */} {i !== 4 && } {i === 4 && } ))} {/* arrow drive → recovered */} {/* media-format chips along the top */} HDD SSD NVMe RAID {/* small thumb drive + SD card icons bottom-left */} {/* thumb drive */} {/* SD card */} {/* clean-room / forensics tag */} CLEAN ROOM )} {motif === "vdi" && ( {/* central server stack (datacenter host) */} {/* rack outline */} {/* server units */} {[-36, -24, -12, 0, 12, 24, 32].map((y, i) => ( {/* led */} {/* vents */} ))} {/* host label */} HOST POOL {/* connection lines from rack out to four endpoints */} {/* endpoint 1 — laptop (top-left) */} {/* mini desktop content */} LAPTOP {/* endpoint 2 — thin client / desktop (bottom-left) */} {/* monitor */} {/* stand */} {/* thin client box */} THIN CLIENT {/* endpoint 3 — tablet (top-right) */} {/* home indicator */} TABLET {/* endpoint 4 — phone (bottom-right) */} PHONE {/* cloud over rack */} AZURE {/* identity lock chip bottom-center */} SSO · MFA )} {motif === "compliance" && ( {/* shield with checkmark (center-left) */} {/* checkmark */} CMMC L2 {/* controls grid (right) — 110 cells, some checked */} 110 CONTROLS · 800-171 {Array.from({ length: 110 }).map((_, i) => { const col = i % 11; const row = Math.floor(i / 11); const x = col * 12; const y = row * 10; // mark ~75% as compliant const ok = (i * 7 + 3) % 10 < 8; return ( {ok && ( )} ); })} {/* legend */} COMPLIANT POA&M {/* CUI tag chip */} CUI {/* GCC High chip */} GCC HIGH {/* DFARS / NIST 800-171 bottom-left stamp */} DFARS 252.204 )} {motif === "gcc" && ( {/* commercial cloud (left) */} M365 COMMERCIAL {/* small data icons inside */} SHARED · GLOBAL {/* gov cloud (right) — bolder, with lock + star */} GCC HIGH {/* lock */} {/* star */} US-ONLY · FEDRAMP HIGH SCREENED US-PERSON {/* migration arrow */} MIGRATE {/* boundary divider */} BOUNDARY {/* workload row at bottom — what gets moved */} {[ { x: 28, label: "MAIL" }, { x: 76, label: "FILES" }, { x: 124, label: "TEAMS" }, { x: 172, label: "ENTRA" }, { x: 220, label: "INTUNE" }, { x: 270, label: "APPS" }, ].map((w) => ( {w.label} ))} {/* mini ticks below to show progress */} {[0, 48, 96, 144, 192, 242].map((x, i) => ( ))} )} {motif === "hipaa" && ( {/* shield with caduceus */} {/* caduceus staff */} {/* wings */} {/* snakes */} {/* top sphere */} {/* ePHI workload chips (right) */} ePHI WORKLOADS {["EHR", "IMAGING", "BILLING", "EMAIL", "BACKUP", "MOBILE"].map((label, i) => ( {/* lock icon */} {label} {/* check */} ))} {/* BAA stamp bottom-left */} BAA {/* OCR audit tag */} 45 CFR § 164 )} {motif === "pci" && ( {/* credit card (left) */} {/* mag stripe */} {/* chip */} {/* PAN — masked except last 4 */} •••• •••• •••• 4242 CARDHOLDER {/* CDE boundary (dashed) wrapping card + processor */} CDE BOUNDARY {/* P2PE arrow → tokenizer */} P2PE {/* tokenizer box (right) */} TOKENIZER {/* token output */} tk_9F4A2C0E tk_77B1D4E8 tk_31E920B7 OUT OF SCOPE {/* 12 requirements grid (bottom) */} 12 REQUIREMENTS · v4.0 {Array.from({ length: 12 }).map((_, i) => { const x = i * 20; const ok = i !== 4 && i !== 9; return ( {i + 1} ); })} {/* SAQ + ASV chips */} SAQ A ASV SCAN QSA )} {motif === "soc2" && ( {/* central report document */} {/* folded corner */} {/* AICPA-style stamp ring */} SOC 2 TYPE II {/* report heading line */} INDEPENDENT SERVICE AUDITOR {/* body lines */} {[6, 12, 18, 24, 30, 36].map((y) => ( ))} {/* signature line */} CPA · OPINION ISSUED {/* Trust Services Criteria orbiting chips */} SECURITY AVAILABILITY CONFIDENTIAL PROC. INTEG. PRIVACY {/* tie-lines from chips into the report */} {/* evidence/control flow at bottom */} CONTROL EVIDENCE · CONTINUOUS {["SSO/MFA", "ACCESS", "CHANGE", "VULN", "BACKUP", "TRAIN"].map((label, i) => ( {label} ))} )} {motif === "iso" && ( {/* PDCA cycle ring (left) */} {/* arrows around ring */} {/* PDCA letters */} PLAN DO CHECK ACT ISMS {/* Annex A control grid (right) - 93 controls in 4 categories */} ANNEX A · 93 CONTROLS {/* category 1: Organizational (A.5) - 37 */} {Array.from({ length: 37 }).map((_, i) => { const x = (i % 13) * 7; const y = Math.floor(i / 13) * 7; return ; })} A.5 · ORG {/* category 2: People (A.6) - 8 */} {Array.from({ length: 8 }).map((_, i) => { const x = (i % 13) * 7; const y = Math.floor(i / 13) * 7 + 40; return ; })} A.6 · PEOPLE {/* category 3: Physical (A.7) - 14 */} {Array.from({ length: 14 }).map((_, i) => { const x = (i % 13) * 7; const y = Math.floor(i / 13) * 7 + 64; return ; })} A.7 · PHYSICAL {/* category 4: Technological (A.8) - 34 */} {Array.from({ length: 34 }).map((_, i) => { const x = (i % 13) * 7; const y = Math.floor(i / 13) * 7 + 88; return ; })} A.8 · TECH {/* certification stamp bottom-left */} ISO 27001:2022 )} {motif === "cjis" && ( {/* badge / seven-pointed star (left) */} {/* outer star */} {/* inner star outline */} {/* inner badge label */} CJIS CRIMINAL JUSTICE FBI · SECURITY POLICY {/* CJI data types (right column) */} CJI DATA TYPES {[ { label: "NCIC HOTFILES", row: 0 }, { label: "III · CHRI", row: 1 }, { label: "FINGERPRINTS", row: 2 }, { label: "MUGSHOTS", row: 3 }, { label: "CAD / DISPATCH", row: 4 }, { label: "BODY-CAM EVIDENCE", row: 5 }, ].map(({ label, row }) => ( {/* lock icon */} {label} {/* encrypted check */} ))} {/* MFA / FIPS / Audit chip row */} ADV. AUTH FIPS 140 AUDIT )} {motif === "training" && ( {/* phishing email envelope (left) */} {/* envelope flap */} {/* hook through the envelope */} {/* "from" line — suspicious */} FROM payroll@signet-hr.co SUBJ Direct Deposit Update Required SIMULATED LURE {/* arrow → click → training */} CLICK {/* training moment card (center-right) */} {/* lightbulb icon */} {/* sparkles */} TEACHABLE MOMENT {/* checklist lines */} {/* dashboard / report KPIs at bottom */} QUARTERLY REPORT {[ { label: "CLICK RATE", value: "4.2%", color: "#e9c578", w: 18 }, { label: "REPORTED", value: "76%", color: "#e9c578", w: 76 }, { label: "TRAINED", value: "98%", color: "#e9c578", w: 96 }, ].map((kpi, i) => ( {kpi.label} {kpi.value} {/* mini bar */} ))} )} {motif === "awareness" && ( {/* central screen with curriculum modules */} {/* monitor */} {/* play button */} {/* progress bar */} MODULE 4 OF 6 68% {/* module list */} {[ { y: 8, title: "PASSWORDS & MFA", done: true }, { y: 16, title: "PHISHING & SOCIAL ENG.", done: true }, { y: 24, title: "DATA HANDLING", done: true }, ].map((m) => ( {m.done && } {m.title} ))} {/* monitor stand */} {/* framework chips around screen */} CMMC HIPAA PCI SOC 2 ISO 27001 {/* role-based audience badges bottom */} {["FINANCE", "ENG", "OPS", "EXEC", "FRONT DESK"].map((label, i) => ( {label} ))} {/* certificate ribbon top-right */} CERT )} {motif === "literacy" && ( {/* keyboard (bottom) */} {/* key grid */} {Array.from({ length: 4 }).map((_, row) => Array.from({ length: 13 }).map((_, col) => { const w = 12, h = 6; const x = 6 + col * 14.5 + (row === 3 ? 6 : 0); const y = 6 + row * 8; const isHighlight = (row === 2 && col === 1) || (row === 2 && col === 7) || (row === 2 && col === 9); // a, j, l return ( ); }) )} {/* space bar */} {/* monitor (top) — showing a "first steps" screen */} {/* "Save" dialog mock */} SAVE AS \u2026 OK {/* file tree */} \u25B8 DOCUMENTS \u25BE DOWNLOADS \u00B7 invoice.pdf \u00B7 photos.zip \u25B8 ONEDRIVE {/* helper arrow + label */} HERE {/* monitor stand */} {/* coffee mug */} {/* steam */} {/* cheat sheet stack right */} {[0, 1, 2].map((i) => ( ))} CHEAT SHEETS {/* friendly badge bottom-left */} NO JUDGMENT )} {motif === "prompt" && ( {/* terminal-style prompt panel */} {/* window controls */} PROMPT {/* multi-line prompt with structure */} role: SR ESTIMATOR context: RFP-2026-AV-OFFICE.pdf task: draft BOM + price guidance constraints: UniFi only, US labor format: markdown table, qty / sku {/* blinking cursor */} ▌ {/* arrow → output */} {/* AI output document */} OUTPUT {/* heading */} {/* table-like rows */} {[28, 36, 44, 52, 60, 68, 76, 84].map((y, i) => ( ))} BOM v1 {/* safety guardrails — three chips along bottom */} {/* PII / data boundary */} DATA BOUNDARY {/* hallucination check */} VERIFY OUTPUT {/* prompt-injection */} INJECTION-AWARE {/* tools chip row top */} {["CLAUDE", "COPILOT", "CHATGPT", "GEMINI"].map((label, i) => ( {label} ))} )} {motif === "cui" && ( {/* document with CUI banner */} {/* top banner — CUI */} CUI {/* portion-marking section: (CUI) prefix */} (CUI) Project Helm progress report summarizing milestones M3\u2013M5 (CUI) Component lead times remain within nominal envelope. (U) No schedule impact. {/* category line */} CATEGORY CTI \u00b7 SP-EXPT {/* bottom banner */} CUI {/* lifecycle ring on the right */} {/* arrows around */} {/* labels at quadrants */} IDENTIFY LABEL PROTECT SEND {/* approved channels chips bottom */} APPROVED CHANNELS {[ { label: "GCC HIGH", ok: true }, { label: "FIPS 140", ok: true }, { label: "ENCRYPTED EMAIL", ok: true }, { label: "S/MIME", ok: true }, ].map((c, i) => ( {c.label} ))} {/* warning chip — don'ts */} NO PERSONAL CLOUD )} {motif === "infra" && ( {/* server rack */} {[52, 68, 84, 100, 116, 132, 148].map((y) => ( ))} {/* cables coming out the side */} )} {/* corner ticks — blueprint vibe */} ); }; const SOLUTION_IMAGES = { "access-control": { src: "assets/access-control.png", alt: "Ubiquiti UniFi Access reader with mobile credential" }, "cctv": { src: "assets/cctv.png", alt: "Security operations desk with a 9-up CCTV monitoring wall showing hallway, lobby, and parking-lot camera feeds, a CAM list and PTZ control panel on the right, a handheld radio in its charger, a Security mug, a Security Operations binder, a 24/7 Protection sign, and a PTZ dome camera on the desk" }, "video-intercom": { src: "assets/video-intercom.png", alt: "UniFi video intercom mounted on a concrete column outside a glass-walled office, screen showing Main Office directory and PIN entry" }, "conference-av": { src: "assets/conference-av.png", alt: "Modern conference room with Teams Rooms display and soundbar" }, "digital-signage": { src: "assets/digital-signage.png", alt: "Two large digital signage displays mounted in a cafe showing menu and promotional content" }, "website-development": { src: "assets/website-development.png", alt: "Desktop monitor, smartphone, and laptop on a designer's desk all displaying the same modern responsive website mockup for Creative Web Solutions with a hero of snowy mountains, alongside a paint chip color fan, a coffee mug, and a sketch notebook — representing end-to-end web design and development" }, "structured-cabling": { src: "assets/structured-cabling.png", alt: "Overhead cable tray with neatly bundled blue and teal Cat6 runs into server racks" }, "office-buildout": { src: "assets/office-buildout.png", alt: "Office under construction with exposed ceiling, glass walls, ladder, drywall pallets, and blueprints" }, "wifi-design": { src: "assets/wifi-design.png", alt: "Engineer holding a tablet showing a Wi-Fi heatmap survey of an office floor" }, "voip-phones": { src: "assets/voip-phones.png", alt: "VoIP desk phone on an office desk with a global network overlay and a headset in the background" }, "fixed-wireless": { src: "assets/fixed-wireless.png", alt: "Starlink dish on a ski lodge deck at sunset with a laptop and coffee, mountains in the background" }, "point-of-sale": { src: "assets/point-of-sale.png", alt: "Cafe countertop POS — tablet showing a new sale with espresso, bagel, salad, and latte, alongside a card terminal showing $22.95" }, "building-automation": { src: "assets/building-automation.png", alt: "Front desk monitor showing a building automation dashboard with a leak detected alert, sensor status list, and water usage chart" }, "hotel-hospitality": { src: "assets/hotel-hospitality.png", alt: "Hotel business center with two workstations, monitors showing a welcome screen, a multifunction printer, and a Business Center sign" }, "multifamily-internet": { src: "assets/multifamily-internet.png", alt: "Cutaway view of a modern multi-family building at dusk with access points on each floor and Wi-Fi coverage radiating to a central hub" }, "print-tracking": { src: "assets/print-tracking.png", alt: "Illustration of a person releasing a print job at a multifunction printer with an office building and a colleague on a laptop in the background" }, "email-migration": { src: "assets/email-migration.png", alt: "Illustration of email migrating from an on-prem server and laptop to a cloud destination laptop and server stack, with a green checkmark confirming success" }, "custom-dashboards": { src: "assets/custom-dashboards.png", alt: "Sales dashboard with KPI tiles for revenue, opportunities, win rate, and deal size, plus pipeline funnel, revenue source donut, revenue trend line, and recent activities feed" }, "fleet-tracking": { src: "assets/fleet-tracking.png", alt: "Live fleet tracking dashboard with a city map showing trucks and vans with route lines, a vehicle list with speeds and statuses, and a geofence panel" }, "ai-assistants": { src: "assets/ai-assistants.png", alt: "AI Assistant interface showing a chat panel summarizing Q2 sales performance with a bar chart, alongside feature callouts for smart conversations, task automation, and data insights" }, "overhead-audio": { src: "assets/overhead-audio.png", alt: "Modern office ceiling with two recessed in-ceiling speakers radiating concentric sound waves, alongside a wall-mounted zone control panel showing Zone A, B, and C and a PAGE button" }, "data-recovery": { src: "assets/data-recovery.png", alt: "Data recovery lab bench with an opened 3.5-inch hard drive exposing the platter and actuator arm, a technician's gloved hands holding it, precision screwdrivers in the foreground, a diagnostic recovery unit and microscope in the background" }, "vdi": { src: "assets/vdi.png", alt: "Laptop on a desk showing the Windows 11 Start menu in front of a rack of dark-blue datacenter servers, with a glowing cloud icon connected by dashed lines to monitor, laptop, and phone icons indicating virtual desktops delivered to any device" }, "cmmc-consulting": { src: "assets/cmmc.png", alt: "Brushed steel military shield with a five-pointed star centered on an olive-green camouflage background, surrounded by faint circuit traces and icons for lock, globe, users, and checkmark — symbolizing CMMC and DFARS compliance" }, "gcc-migration": { src: "assets/gcc-migration.png", alt: "M365 GCC Migrations marketing graphic showing a navy Microsoft 365 GCC cloud icon next to a steel shield with a padlock, a laptop displaying Outlook, Word, Excel, PowerPoint, Teams, SharePoint, OneDrive, and Defender app icons, with the US Capitol dome in the background and four feature callouts beneath: Government Compliant, Enhanced Security, Seamless Migration, Expert Support" }, "hipaa-consulting": { src: "assets/hipaa.png", alt: "Navy steel shield embossed with the caduceus medical symbol on a desk, next to a laptop displaying a glowing padlock surrounded by health icons and a stethoscope and clipboard in the foreground, with a softly blurred hospital corridor in the background — representing HIPAA security and compliance" }, "pci-consulting": { src: "assets/pci.png", alt: "Steel shield with a padlock standing on a desk in front of a laptop showing a PCI Compliance dashboard with a credit card graphic and icons for Secure Network, Data Protection, Access Control, Monitoring, and Policy Management — a payment terminal with an inserted card sits in the foreground" }, "iso27001-consulting": { src: "assets/iso27001.png", alt: "Navy steel shield reading ISO 27001 Information Security Management on a desk next to a laptop showing an ISMS diagram with Asset Management, Risk Management, Access Control, Incident Response, and Continual Improvement, alongside a navy binder labeled ISMS Policies & Procedures and a notebook with Confidentiality, Integrity, and Availability checked off" }, "soc2-consulting": { src: "assets/soc2.png", alt: "Navy steel shield reading SOC 2 Compliance with a padlock on a desk next to a laptop displaying the five SOC 2 Trust Services Criteria — Security, Availability, Confidentiality, Processing Integrity, Privacy — beside a notebook with all five criteria checked off and a printed SOC 2 Report" }, "cjis-consulting": { src: "assets/cjis.png", alt: "Navy steel shield reading CJIS Criminal Justice Information Services with a padlock, on a desk next to a laptop showing a CJIS Compliance dashboard with Access Control, Personnel Security, Data Integrity, Audit & Accountability, and Encryption & Protection icons, alongside a CJIS Security Policy notebook, a police patch and badge, a radio, and handcuffs in a dispatch center setting" }, "phishing-simulation": { src: "assets/phishing-simulation.png", alt: "KnowBe4 Human Risk Management marketing graphic showing a laptop with a KnowBe4 dashboard — Risk Score 78 Moderate, Phishing Security Tests 12.4% click rate, Training Progress 85% completion, 152 At-Risk Users — beside icons for Security Awareness Training, Simulated Phishing Attacks, Behavioral Risk Insights, and Stronger Security Culture; tagline reads Reduce Risk. Build Resilience." }, "security-awareness-training": { src: "assets/security-awareness-training.png", alt: "Cybersecurity trainer standing in a modern conference room pointing to a large wall display showing a glowing shield with a padlock surrounded by icons for email, cloud, user, mobile, laptop, and database, while four attendees with open laptops — each screen showing a padlock — watch the session" }, "computer-literacy": { src: "assets/computer-literacy.png", alt: "Friendly trainer in a small office classroom pointing to a wall display titled Computer Training — Build skills. Work smarter. with checkmarks for Essential Skills, Productivity Tools, Real-World Applications, and Confidence for Success; four adult learners of varied ages and backgrounds follow along on open laptops showing the same Computer Training screen" }, "ai-prompt-training": { src: "assets/ai-prompt-training.png", alt: "AI Training session in a modern conference room — instructor pointing at a wall display showing a glowing wireframe profile and four pillars labeled Understand AI, Apply to Real Work, Enhance Productivity, and Use AI Responsibly, while four attendees with open laptops featuring neural-network and dashboard visuals take notes around a wooden table" }, "cui-training": { src: "assets/cui-training.png", alt: "CUI handling training session — instructor presenting in front of a wall display showing a glowing CUI hub connected by lines to folder, document, user, and email icons, while six adult learners seated around a conference table follow along with notebooks" }, }; const Solutions = ({ go }) => { const [filter, setFilter] = React.useState("All"); const categories = ["All", ...new Set(SOLUTIONS.map((s) => s.category))]; const filtered = filter === "All" ? SOLUTIONS : SOLUTIONS.filter((s) => s.category === filter); return (
Solutions

Project work, scoped and signed end to end.

Beyond the monthly managed services, these are the project-shape engagements we deliver — designed, installed, and documented by the same engineers who'll keep them running afterward. {" "} Clients with a Managed Services Agreement receive 20% off all project work.

{categories.map((c) => ( setFilter(c)} > {c} ))}
{filtered.map((s) => { const Wrap = s.href ? "a" : "div"; const wrapProps = s.href ? { href: s.href, target: "_blank", rel: "noopener noreferrer", className: "case-card", style: { cursor: "pointer", textDecoration: "none" } } : { className: "case-card", style: { cursor: "default" } }; return (
{SOLUTION_IMAGES[s.id] ? ( {SOLUTION_IMAGES[s.id].alt} ) : ( )}
{s.category} · {s.scope}

{s.title}

{s.summary}

{s.highlights.map((h, i) => (
{h.n}
{h.l}
))}
); })}
); }; window.Solutions = Solutions;