Modern Workplace 2026: Three Packages for Small and Medium-Sized Businesses

The Three Packages at a Glance

The Standard plan includes monitoring, patch management, EDR, a tested backup, and email security—the essentials every workstation should have. EDR is included in this package, not in a more expensive tier.

Premium adds awareness training, dark web monitoring, and a SOC that monitors the system 24/7.

Platinum includes the Premium tier plus information security governance aligned with the Zero Trust model and on-site support.

If you choose a three-year plan, your rate will be fixed and you’ll receive a discount. We’ll provide rates upon request.

Why a Tested Backup Is Included in the Base Package

A business owner called us one Monday morning. Ransomware—everything had been encrypted. “No problem,” he said, “we have a backup.” That backup hadn’t been running for eight months. No one had checked it, and the last usable version was months old.

Just having a backup isn’t enough. What matters is whether the restore works when you need it. That’s why every Modern Workplace includes a monthly backup check, which includes verifying that a restore actually works. Not just an assumption—a test.

Why Access Is Part of the Process

An employee resigns, returns their laptop, and everyone goes about their business as usual. Four months later, that same account is still logging in—from a personal phone, outside of office hours. We see this happen more often than you might think: the account remains active, the license continues, and access to email and files remains open.

In a well-organized workplace, offboarding is part of the process. Accounts are deactivated, sessions are terminated, access is revoked, and devices are wiped. With Conditional Access, you can also control who logs in, from which device, and from which location.

If you want to know where you stand right now, you can do so without an appointment. Our free Tenant Check at tenant.alta-ict.nl analyzes your Microsoft 365 environment and shows, among other things, MFA coverage, administrator accounts, and dormant accounts. Just to be clear up front: the check identifies issues—it doesn’t resolve them or store any of your data. It’s up to you to decide what to do with the results.

Why Your People Are Just as Important as Your Technology

An accountant received an email from her director. It asked her to urgently pay an outstanding invoice using a new account number. The tone was right, the name was right, and the signature was right. It wasn’t the director; someone had spoofed the email address. The payment was almost transferred.

This type of fraud relies on two things: an email environment that allows spoofing, and an employee who doesn’t recognize it. You address both. Email security that protects your domain is included in the Standard plan; the awareness training that teaches your employees to recognize such messages is available starting with the Premium plan.

Why a SOC Makes a Difference at Night

At 3:12 a.m., an alert came in. A customer’s login credentials were being sold on a dark web forum, stolen in a breach at a third-party service. The customer was asleep, and the SOC was monitoring the situation. Before anyone could misuse the credentials, the password was reset and access was blocked.

Many breaches start exactly like this: a password is leaked from another service, someone reuses it, and you don’t notice until someone has already gained access. Dark web monitoring and a SOC that monitors 24/7 are included in the Premium and Platinum plans. That way, an alert at 3 a.m. won’t end up in an empty inbox.

Demonstrable, not just occasional

If you work for a municipality or a healthcare organization, you’re increasingly being asked to demonstrate how you secure your data. A simple email saying “we use Microsoft 365” isn’t enough. Clients want verifiable measures: who monitors the system, how often do you apply patches, has your backup been tested, and what happens in the event of a data breach.

We design the Modern Workplace so that every measure is clearly defined and verifiable, based on our own certification for ISO 27001:2023, ISO 9001:2015, and NEN 7510:2024. This makes your job easier when a client requests proof, and it stands up to scrutiny during an audit.

Frequently Asked Questions

Which package is right for my organization?

For most organizations, Premium is the starting point, and it’s also the package most often chosen: monitoring outside office hours, dark web monitoring, and awareness training are no longer luxuries these days. Standard is the minimum requirement for every workstation. If you work for local governments or healthcare institutions, the governance layer of Platinum also comes into play.

Can I upgrade to a higher plan later?

Yes. The packages build on one another, so switching to a new one adds layers without requiring a redesign of the foundation.

What does the three-year option entail?

If you choose a three-year plan, your rate will be fixed for that period, and you’ll receive a discount on your monthly payment.

How much does it cost?

We provide pricing information upon request so that we can match the right package to the right situation, rather than simply quoting a price without context.

Is EDR really included in the basic package?

Yes. EDR is included in Standard. It’s the layer of defense that every workstation should have, so it shouldn’t be part of a more expensive tier.

Conclusion

Each layer in the Modern Workplace 2026 exists because of a real-world scenario: the backup that was never tested, the account that remained active after an employee left, the fake invoice that was almost paid, the alert at 3:00 a.m. The packages make the choice clear without oversimplifying the coverage.

Would you like to know which package is right for your organization? Schedule a brief session with ALTA-ICT, and we’ll go over your situation together.