Taint and Technology Services Limited

Six services, one shared bench rhythm. Bay

Taint and Technology Services Limited delivers managed information technology and endpoint hygiene from Rm A 12/F Berford Tower, 68-72 Tai Kok Tsui Rd, Tai Kok Tsui, Hong Kong - 999077, Hong Kong (HK). Each service below is operated from the same physical bay on the Tai Kok Tsui floor, so a device that enters for enrolment can be patched, triaged and drilled without ever leaving the building. The six services are designed to be bought separately or as a complete managed floor. Small practices often start with enrolment and triage, then add the remaining rings as the relationship matures.

Ask the desk which services fit your floor →

Endpoint wipe rack

  • Enrolment bench, station 02Active
  • Drill sandbox, station 03Scheduled
  • Kit build line, station 05Staging

Patch ring board

Pilot
Floor
Held

Every ring carries a written reason for the machines that are held back.

Ticket lane rail

  • L1Ring B release cleared after pilot watch period.
  • L2Quarterly restore drill completed, summary filed.
  • L3Stale share rule removed during network review.
Request a scoping call with the bay supervisor

Service catalogue

The six runs that keep a professional floor clean

Each service below has a fixed scope, a written output and a named owner inside Taint and Technology Services Limited. Clients can see exactly what was done in a given month, and what was not done and why.

T

Device Enrolment Runs

Enrolment is the first gate in the bay. When new hardware arrives, whether bought by the client or supplied by a reseller, it is booked onto the enrolment bench, inspected, recorded against the asset register and imaged with the client baseline. The baseline covers the operating system build, the approved application set, the security agent, the encryption settings and the local administrator policy. Nothing leaves the bench until those checks pass.

For existing machines that have never been formally enrolled, we run a catch up enrolment programme. Devices are visited in small batches, usually after hours or during a quiet period agreed with the client, so the working day is not interrupted. Each visit produces the same record as a bench enrolment, including the serial number, the assigned user, the storage encryption state and the date of the last successful backup.

The output is a single register in ordinary spreadsheet format that lists every enrolled device and its current state. The client owns that file and can hand it to an auditor, an insurer or a prospective acquirer without needing our software. We consider that portability to be part of the service, not an afterthought.

T

Patch Ring Scheduling

Patch scheduling at Taint and Technology Services Limited is built around rings rather than around a single monthly maintenance window. A ring is a group of endpoints that share a role and a tolerance for interruption. The pilot ring contains a small number of representative machines, often including one belonging to a senior person. The main floor ring follows. A third ring holds specialist machines, such as laboratory instruments or design workstations with unusual drivers, that need a manual check before every major update.

Critical security releases are handled outside the normal cadence. The technician on duty reviews the vendor advisory, decides whether the fix applies to the client estate, and if it does, pushes it to the pilot ring within the agreed response period. The help desk watches ticket volume for a defined window before the floor ring follows. If anything looks wrong, the rollout pauses and the pilot machines are inspected before the rest of the estate is touched.

Every release ends with a short note that states which rings moved, which were held, and the reason for each hold. The note is written in plain language because it is meant to be read by the person who signs off the firm technology budget, not only by other technicians.

S

Incident Triage Desk

The triage desk is the human front door of the service. Reports arrive by email, by telephone or in person when a client visits the Tai Kok Tsui floor. Each report is read by a technician who is familiar with that client estate, and a severity is assigned using a simple published scale. Loss of access to work in progress, suspected data exposure and full floor outages are treated as urgent. Cosmetic issues and requests for new software are handled in a scheduled lane.

The person who raised the ticket receives a named contact and an expectation of when they will hear back. We do not send automated replies pretending to be a person. If the issue needs a site visit, the visit is booked during the same contact. If it can be fixed remotely, the technician stays on the line until the user confirms that the work is usable, not merely that the error message has disappeared.

The desk also maintains a small knowledge file for each client, recording recurring problems and the fixes that worked. This is what allows a replacement technician to pick up a ticket on a quiet afternoon and still sound like someone who knows the office.

P

Backup Drill Audits

A backup regime is only meaningful if it has been tested against real files. Our drill audits take a sample of the client backup set, restore it into an isolated environment, and verify that the restored data opens correctly and matches the expected content. The drill uses real document types from the client practice, not synthetic test files, because the point is to prove that the actual records of the firm can be recovered.

Each drill produces a summary that records the date, the scope of the sample, the elapsed restore time and any issues found. If a restore fails, the summary states what failed and what corrective action was taken. Clients receive the summary and keep it in their own records. Where a client has regulatory or contractual retention duties, the summaries form a useful part of the evidence that recovery obligations are being met.

We recommend a cadence that matches the value of the data and the pace at which it changes. A firm that closes books monthly will usually want a different rhythm from a design studio whose project archive grows every day. The cadence is agreed in writing and reviewed at least once a year.

I

Network Hygiene Reviews

Office networks accumulate clutter. Test rules stay in place after a project ends, former staff accounts keep their file permissions, small consumer routers quietly handle important traffic, and guest access sometimes reaches more of the network than anyone intended. A hygiene review walks through the network with the client and records what is actually there, compared with what the documentation says should be there.

Findings are ranked by exposure and by the effort required to close them. A shared folder open to the entire floor is usually a quick fix with a large benefit, while replacing an ageing switch may be a budget decision for the next quarter. The review report separates the two so that the client can act on the urgent items immediately without waiting for a capital approval.

Reviews are repeated on a rolling basis, and each repeat begins from the previous report so that closed items can be confirmed and new drift can be identified. The result is a network that stays close to its documented shape instead of drifting until the next major incident forces a rebuild.

O

Onboarding Kit Builds

Onboarding kits are assembled on the same benches as enrolment. A kit contains the assigned device, the charger, any approved peripherals, and a short card explaining how to reach the triage desk. The device is enrolled to the new joiner before the start date, and the access profile is prepared so that the first sign in reaches the correct resources for the role.

We ask for the start date and the role at least five working days in advance where possible, which allows time to confirm licensing, test the sign in and label everything clearly. For urgent hires, an express kit can be produced in a shorter window, although the access review is never skipped. Granting broad access on day one and tightening it later is a pattern that causes avoidable exposure.

The kit build also covers the departure case. When someone leaves, the reverse run removes access the same day, collects the device and wipes it in the bay before the asset register is updated. Firms that handle confidential client material tell us this symmetry is the single most reassuring part of the service.

How an engagement runs

From first walkthrough to a settled rhythm

  1. Walkthrough and census

    We visit the client floor, count the devices, note the software in use and record how work actually flows between people. The census becomes the baseline against which every later change is measured, and it is written in a format the client can keep.

  2. Ring and policy design

    Devices are sorted into rings, a patch cadence is agreed, and the triage severity scale is adapted to the client practice. Where a client has regulatory duties, those duties are written into the schedule rather than left as an assumption.

  3. First enrolment and drill

    The first batch of devices passes through the bay and the first restore drill is run. This early cycle surfaces most integration problems while the estate is still small and the disruption is easy to manage.

  4. Steady operation and review

    Once the rhythm settles, the client receives regular notes and an annual review that re-examines the rings, the drill cadence and the network report. Changes to the firm are folded into the schedule rather than handled as emergencies.

Taint and Technology Services Limited opens its spring enrolment window, and each new engagement begins with a device census followed by a first pass through the enrolment bench.

What a client receives each month

Every client receives a short written pack: the enrolment register as it currently stands, any patch ring notes issued during the month, a list of triaged tickets with outcomes, and the date of the last restore drill with its result. The pack is deliberately brief. It is meant to be read in ten minutes and filed in a folder that an outsider could understand.

Clients with multiple offices receive the same pack per location, which makes it straightforward to compare conditions between floors and to spot where a local arrangement has drifted from the standard. Everything in the pack is written in English and uses the client name consistently.