Installnet IT & Technology Weekly

October 19 – October 25, 2026
Prepared by Aaron Weinberg, CTO
Covers: Facilitynet · Installhub · API · Notifications · Corporate IT
AI Tools & Automation →
Platform Availability30 DAYS
100.00%
Every production system · target 99.9%
Above target
RoadmapSNAPSHOT
5
Active high-priority features
One shipped
Portfolio MixSNAPSHOT
17%·61%·22%
Share of active investment: Grow · Do · Run (targets 25% · 50% · 25%)
Grow and Run below target
Security FindingsSNAPSHOT
22% in SLA
109 open: 2 Critical, 30 High, 77 Med/Low
Down 28 points; 85 overdue
Recover — DR & BCPSTATUS
15 min RPO ✓
Database restore test runs and passes automatically each month
DR exercise needs a date

Operate — System Availability & Incidents

Uptime per production system (trailing 30 days) and every customer-visible incident of 5+ minutes in the last 4 weeks
Facilitynet100.00%
Installhub100.00%
API100.00%
Notifications100.00%
Marketing sites100.00%
One tick per day, September 26 – October 25. Green = clean day · faded green = brief blips, minutes total, site stayed up · amber = site-level outage · red = major outage (hours) · gray = planned maintenance. Target: 99.9% per system; values exclude planned maintenance.
DateSystemImpactDurationStatus
No customer-facing incidents. This table shows a rolling four-week window.

Build — Roadmap Delivery & Investment

Where development investment is going (Grow / Do / Run), and the active high-priority features
Grow the business17% (target 25%)
Do the business61% (target 50%)
Run the business22% (target 25%)
From this month's full refresh, less one feature that shipped; based on 36 of 38 active features scored.
FeatureOwnerStageTargetStatus
Company Hierarchy, Phase 2 (PROD-544)DoAaronIn developmentQ3 2026Behind target
HubSpot Integration (PROD-480)GrowEricIn developmentSep 30, 2026Behind target
Market Segment tagging in SP Locator (PROD-513)DoAlexanderIn developmentQ4 2026In development
Functions & Permissions Overhaul (PROD-536)DoAaronIn designQ4 2026In design
Digital signature workflow (PROD-43)DoAaronReady to developQ4 2026Queued
One delivery this week: Scope of Work Standardization, Phase 2 shipped after follow-up work. Its value points were counted at the August release, so Q4 value shipped stays at 0 points (Q3 closed at 56). HubSpot Integration, the one growth-focused item in flight, remains past its September 30 target and in development. Company Hierarchy has minor updates left and is expected to complete in the next two weeks.

Secure — Risk Posture

Open security findings across application code and third-party software, measured against the resolution SLA
SeverityOpenPast SLASLA Target
Critical2214 d
High302530 d
Medium635190 d
Low147180 d
22% of open findings are still inside their resolution window.
This week

No new code review ran this week (the last was October 6). Two findings were fixed, one rated critical and one high. The drop in the percentage is age: 28 medium findings from the July review passed their 90-day target.

Third-party software: six new items reported (two high, four medium), none known to be actively exploited.

Server patching

On policy All servers current; no security patches overdue. Last scan October 25.

Corporate IT & People — monitoring figures for September; phishing, training and device inventory current
Devices ProtectedExternal Weak PointsSecurity EscalationsPhishing Test FailuresTraining CompleteSystems Current
63 devices 85 users protected (September) Not reported vendor format change (September) 7 investigated · 1 responded to (September) 10.7% October test in progress · 6 of 56 staff clicked so far 100% monthly, all users 100% on supported Windows 11
Multi-factor sign-in is enforced for every account. The monthly device inventory covers 76 devices: every Windows computer runs Windows 11, and a single conference-room unit is one release behind. Our provider's September monitoring reports reached us October 6 after a re-send, and automatic delivery has since been fixed. October's phishing test is still running, so its figure may change. The provider's September service report: 38 support tickets opened and 38 closed, with all 8 customer reviews positive.

Recover — Backup & Continuity Readiness

Can we come back from a bad day, and how much would we lose? Proven by tests, not job logs.
AssetOwnerBackup HealthRPOLast Verified RestoreStatus
Production databaseCTODaily full + 15-min log copies, offsite15 min ✓Oct 15 · automatic monthly testVerified · 19 min
Server imagesCTOApp servers weekly; database & utility monthlyLayer beneath live backups—On schedule
Document storageCTO / AWSVersioned, continuousContinuous—Healthy
M365 (email, files, Teams)XPERTECHS / DattoAutomaticPer Datto scheduleJul 21, 2026Restore verified
Disaster-recovery exerciseCTO——None on recordNeeds a date
RPO = maximum data loss if the system failed right now. The database restore test runs automatically every month without anyone starting it; October's ran the 15th and the next is due mid-November. All scheduled image backups for live systems completed this period.

Decisions & Risks — What Needs Exec Attention

DRAFT — written from this week's data, reviewed with the CTO

Most open security findings are now past their target date

85 of 109 open findings are past the date we committed to fix them; 22% are still inside their window, down from 50%. Almost all of the drop is age: 28 medium-rated findings from the July code review crossed their 90-day target this week, and none of them has a tracking ticket yet, so they never entered the fix queue. One critical item was fixed this week; two remain overdue.

Two roadmap items are past target

HubSpot Integration (due September 30) and Company Hierarchy Phase 2 (Q3) are still in development. Company Hierarchy has minor updates left and is expected to finish within two weeks. Scope of Work Standardization Phase 2 shipped this week.

Still on my list: the disaster-recovery tabletop exercise

It's the one recovery control we haven't exercised end to end, and getting it on the calendar is on me.