Editor's note: This announcement has been updated to reflect current service terminology and clarify how Compass Command Center, account intelligence, Closed-Loop Delivery, and the Apex Security Platform work together. The original announcement date and quoted remarks have been preserved.
On April 21, 2026, CompassMSP announced an expansion of its cybersecurity services connecting threat detection, digital forensics, and incident response with IT operations. The goal was to reduce the delays that occur when security findings must move between disconnected teams before action can begin.
That connection is part of Compass Command Center, the Compass operating model guided by account intelligence and Closed-Loop Delivery. It brings business context, technical knowledge, and coordinated execution into the services Compass delivers across Manage, Modernize, and Secure.
Compass Command Center Connects Context With Action
Effective security response depends on understanding the environment behind an alert: which systems support critical operations, who owns them, what normal activity looks like, and which obligations shape the response.
Account intelligence brings together knowledge of the customer's business, environment, risks, priorities, and regulatory obligations. Discovery, documentation, customer data, and telemetry help establish an operating baseline that informs the teams supporting the account.
Within Compass Command Center, that shared understanding helps connect security findings with IT operations and advisory decisions. Teams can assess an issue in business context and coordinate the appropriate next steps within the customer's service scope.
Closed-Loop Delivery Turns Findings Into Improvements
Closed-Loop Delivery is the five-phase process that carries this understanding into execution and brings lessons back into account intelligence:
Understand: Learn the organization, environment, risks, and priorities so recommendations reflect the business they support.
Build: Design, implement, and establish the operating baseline, with security built into the environment from the start.
Operate: Run, support, and monitor the environment each day, building the context needed to recognize changes and investigate issues.
Respond: Take ownership of issues within scope, coordinate the right teams, contain threats, and support resolution and recovery.
Strengthen: Apply findings from operations, investigations, and reviews to hardening, detection tuning, documentation, and roadmap priorities.
What Strengthen learns updates what Understand knows. This feedback keeps account intelligence current and helps teams address the conditions behind an issue as well as its immediate effects.
The Apex Security Platform Provides Detection and Response
Within this operating model, the Apex Security Platform provides tiered security capabilities aligned to business risk and operating complexity. Compass Command Center connects delivery across services; the Apex Security Platform supports detection, investigation, and response.
Essentials: The security baseline included with Compass Managed IT, supporting foundational protection and operational controls.
Core Defense: Continuous monitoring, AI-assisted triage, human analyst validation, and scoped containment.
Complete Security: Builds on Core Defense with dedicated analyst support, continuous forensics, deeper investigation, threat hunting, and executive reporting.
Enterprise: A tailored engagement for larger or more complex environments, with dedicated resources and response commitments defined by scope.
The appropriate coverage reflects the organization's exposure, regulatory requirements, and operational needs. Forensic depth and response responsibilities vary by engagement.
Connecting Investigation With IT Remediation
A validated threat needs a clear path to action. Where Compass provides both cybersecurity and managed IT, security findings can inform containment, patching, hardening, and recovery through coordinated delivery teams. In security-only engagements, Compass coordinates with the customer's internal IT team or provider according to agreed responsibilities and authorized access.
"Our platform is built to not only find threats, but understand them," said Eric Hlutke, identified as Chief Information Security Officer of CompassMSP in the original April 21 announcement. "This forensic-led approach grounds every response in hard evidence."
Investigation findings also inform the next cycle of work: updating documentation, improving controls, tuning detections, and refining priorities through Closed-Loop Delivery.
Security Leadership and Compliance Support
vCISO & Security Advisory connects operational findings with security strategy, governance, risk prioritization, and executive reporting. Compliance & Risk Management supports readiness assessments, control alignment, documentation, and remediation planning for applicable requirements.
Together, these services help leadership understand what findings mean for the business and where to focus investment. Advisory, compliance support, and incident response are delivered according to the agreed engagement.
CompassMSP provides managed IT, cybersecurity, cloud, communications, and strategic technology services for mid-sized businesses. Through Compass Command Center, account intelligence, and Closed-Loop Delivery, Compass connects the teams and services that help organizations manage technology, reduce risk, and support growth.
At CompassMSP, we imagine a world where technology doesn't get in the way. It supports people instead. Articles published under the CompassMSP name represent the combined expertise of our cybersecurity analysts, cloud architects, and strategic advisors. From official company announcements to foundational IT guidance, these insights are curated to help your business build simpler, safer, and stronger technology systems.
Navigate What’s Next
Get new insights, practical guides, and timely resources delivered to your inbox.
