Installnet IT & Technology Weekly

October 26 – November 1, 2026

Prepared by Aaron Weinberg, CTO
Covers: Facilitynet · Installhub · API · Notifications · Corporate IT
AI Tools & Automation →

Platform Availability30 DAYS

100.00%

Every production system · target 99.9%

Prior 30 days: 100.00%

Above target

RoadmapSNAPSHOT

Active high-priority features

Last week: 5

One shipped

Portfolio MixSNAPSHOT

18%·60%·22%

Share of active investment: Grow · Do · Run (targets 25% · 50% · 25%)

Last week: 17% · 61% · 22%

Grow and Run below target

Security FindingsSNAPSHOT

33% in SLA

118 open: 3 Critical, 33 High, 82 Med/Low

Last week: 22% · 109 open

Up 11 points; 79 overdue

Recover — DR & BCPSTATUS

15 min RPO ✓

Database restore test runs and passes automatically each month

Database Oct 15 · M365 Jul 21

DR exercise needs a date

Operate — System Availability & Incidents

Uptime per production system (trailing 30 days) and every customer-visible incident of 5+ minutes in the last 4 weeks

Facilitynet100.00%

Installhub100.00%

API100.00%

Notifications100.00%

Marketing sites100.00%

One tick per day, October 3 – November 1. Green = clean day · faded green = brief blips, minutes total, site stayed up · amber = site-level outage · red = major outage (hours) · gray = planned maintenance. Target: 99.9% per system; values exclude planned maintenance.

Date	System	Impact	Duration	Status
No customer-facing incidents. This table shows a rolling four-week window.

Build — Roadmap Delivery & Investment

Where development investment is going (Grow / Do / Run), and the active high-priority features

Grow the business18% (target 25%)

Do the business60% (target 50%)

Run the business22% (target 25%)

From this month's full refresh, based on 24 of 25 active features scored.

Feature	Owner	Stage	Target	Status
HubSpot Integration (PROD-480)Grow	Eric	In development	Sep 30, 2026	Behind target
Market Segment tagging in SP Locator (PROD-513)Do	Alexander	In development	Q4 2026	In development
Functions & Permissions Overhaul (PROD-536)Do	Aaron	In design	Q4 2026	In design
Digital signature workflow (PROD-43)Do	Aaron	Ready to develop	Q4 2026	Queued

One delivery this week: Company Hierarchy, Phase 2 shipped. Q4 value shipped: 13 points so far (Q3 closed at 56). HubSpot Integration, the one growth-focused item in flight, remains past its September 30 target and in development.

Secure — Risk Posture

Open security findings across application code and third-party software, measured against the resolution SLA

Severity	Open	Past SLA	SLA Target
Critical	3	2	14 d
High	33	23	30 d
Medium	64	48	90 d
Low	18	6	180 d

33% of open findings are still inside their resolution window.

This week

No new monthly code review ran this week (the last was October 6). Sixteen new findings were added after full reviews by our automated code reviewer, each with a work ticket. Eight findings were fixed, five of them already overdue.

Third-party software: one new critical item reported, not known to be actively exploited.

Server patching

On policy All servers current; no security patches overdue. Last scan November 1.

Corporate IT & People — monitoring figures for October; phishing, training and device inventory current

Devices Protected	External Weak Points	Security Escalations	Phishing Test Failures	Training Complete	Systems Current
66 devices 87 users protected (October)	Not reported vendor format change (October)	8 investigated · 0 responded to (October)	10.7% October test · 6 of 56 staff clicked	100% monthly, all users	100% on supported Windows 11

Multi-factor sign-in is enforced for every account. The monthly device inventory covers 76 devices: every Windows computer runs Windows 11, and a single conference-room unit is one release behind. Our provider's October monitoring reports arrived automatically on November 1, the first month without a re-send. The provider's September service report (October's arrives in early November): 38 support tickets opened and 38 closed, with all 8 customer reviews positive.

Recover — Backup & Continuity Readiness

Can we come back from a bad day, and how much would we lose? Proven by tests, not job logs.

Asset	Owner	Backup Health	RPO	Last Verified Restore	Status
Production database	CTO	Daily full + 15-min log copies, offsite	15 min ✓	Oct 15 · automatic monthly test	Verified · 19 min
Server images	CTO	App servers weekly; database & utility monthly	Layer beneath live backups	—	On schedule
Document storage	CTO / AWS	Versioned, continuous	Continuous	—	Healthy
M365 (email, files, Teams)	XPERTECHS / Datto	Automatic	Per Datto schedule	Jul 21, 2026	Restore verified
Disaster-recovery exercise	CTO	—	—	None on record	Needs a date

RPO = maximum data loss if the system failed right now. The database restore test runs automatically every month without anyone starting it; October's ran the 15th and the next is due mid-November. All scheduled image backups for live systems completed this period.

Decisions & Risks — What Needs Exec Attention

DRAFT — written from this week's data, reviewed with the CTO

Security fix backlog is shrinking, but most open findings are still past target

79 of 118 open findings are past the date we committed to fix them; 33% are inside their window, up from 22%. Eight findings were fixed this week, five of them overdue. Sixteen new findings were added after full reviews by our automated code reviewer, and each already has a work ticket. 24 medium-rated findings from July's review still have no work ticket. Two of the three open critical items are overdue.

Company Hierarchy shipped; HubSpot Integration is still in development

Company Hierarchy Phase 2 is live this week. HubSpot Integration, due September 30, is the one roadmap item past its target.

Still on my list: the disaster-recovery tabletop exercise

It's the one recovery control we haven't exercised end to end, and getting it on the calendar is on me.