Managed IT, Security, and Telephony Consolidation Built for a Family-Run Building Products Contractor
How Cornerstone Companies modernized its Microsoft 365 environment, blocked a coordinated CEO impersonation attack, and started consolidating three phone carriers into one Teams Phone platform — all under a single managed IT agreement.
Managed by Soaring Towers
Hear it from JR Bussard at Cornerstone Companies
Coming soon...
A family-run South Florida specialty building products contractor — growing into a multi-brand operation.
Cornerstone Companies is a family-run specialty building products contractor based in Palm Beach County, Florida — installing windows, doors, and related products for residential and commercial projects across South Florida. With five Bussard family members in operational leadership and a 30+ person team of installers, project engineers, CAD designers, and field supervisors, the business runs on the decision-making speed of a family operation paired with the operational complexity of a mid-market contractor.
As the company expanded into multiple brand identities (Plumbline Windows and Cornerstone Events) and adopted mid-market tools like Microsoft Dynamics 365 Business Central, the IT environment needed to catch up to the business. Cornerstone came to Soaring Towers in January 2026 for managed IT, security, and a partner that could move from helpdesk into project-tier work as the business grew.
A growing contractor with the IT footprint of three companies — spread across three phone systems and exposed to coordinated phishing.
Three separate phone carriers, an onboarding workflow that missed Microsoft 365 licensing, DNS bottlenecked through the MSP, and a CEO impersonation campaign mid-engagement — the same pattern we see across most growing contractors before they consolidate under a single managed IT partner.
-
Three phone carriers, no unified platformAT&T, RingCentral, and Office@Hand all running in parallel — every employee offboarding required a separate ticket per carrier to delete accounts, leaving “ghost accounts” when steps were missed.
-
New hires arriving without M365 licensesEntra ID identities provisioned via Rippling SCIM, but Microsoft 365 license assignment wasn’t triggered automatically — new employees showed up to day one without email or Office access.
-
DNS bottlenecked through the helpdeskEvery DNS record change required a support ticket — no client self-service. Routine SPF, DKIM, and CNAME updates piled up in the queue and slowed marketing and web initiatives.
-
CEO impersonation phishing exposureAn attacker targeted a Cornerstone employee with three coordinated emails impersonating the CEO, rotating sender addresses to bypass initial blocks — exactly the kind of BEC pattern small contractors are increasingly hit with.
A managed Microsoft 365 foundation, an enterprise security stack, owned DNS, and a telephony consolidation underway.
Soaring Towers designed and is implementing an end-to-end managed environment built for the way Cornerstone Companies operates — across two office subnets, a fleet of installers and supervisors, and three brand identities. The four pillars below replaced the fragmentation and exposure that were holding the contractor back.
Today’s growing contractors need more than break-fix IT.
A specialty building products contractor running on a mid-market ERP, multiple subsidiary brands, and a 30-person team across office and field can’t operate on a patchwork of phone carriers, ad-hoc onboarding, and helpdesk-routed DNS changes.
At Soaring Towers, we specialize in managed IT for growing contractors and family-run businesses — bringing the security, identity, and infrastructure of a much larger company without the enterprise IT overhead.
Four foundations of a modernized contractor IT environment.
Every layer below was selected and configured specifically for the realities of a growing specialty building products contractor — multiple subnets, multiple brands, a mix of office and field staff, and an HRIS (Rippling) that handles its own device profile work.
Microsoft 365 + Teams Phone
Business Standard licensing across the team, Microsoft Copilot, and a multi-carrier Teams Phone consolidation underway via SIPPIO — retiring AT&T, RingCentral, and Office@Hand into one unified calling platform.
- M365 Business Standard + Copilot
- Teams Phone via SIPPIO
- 10DLC SMS via ClerkSMS
SentinelOne EDR + Usecure + CIPP
Enterprise-grade endpoint protection paired with active phishing simulations and CIPP-driven M365 threat response — the stack that blocked a coordinated CEO impersonation campaign across three rotating sender addresses.
- SentinelOne endpoint detection & response
- Usecure phishing simulations
- CIPP M365 threat response
ConnectWise RMM + Entra ID + Rippling SCIM
ConnectWise RMM across the 14-device Windows/Mac fleet, ScreenConnect with PAM elevation controls, and Microsoft Entra ID synced via Rippling SCIM — operating cleanly in a non-Intune environment.
- ConnectWise RMM on 14 endpoints
- ScreenConnect PAM elevation
- Rippling-to-Entra SCIM sync
Cloudflare + Mailgun + client self-service
All Cornerstone brand domains under Cloudflare DNS, Mailgun configured for transactional email white-labeling, and direct Cloudflare access provisioned to JR — so routine DNS changes don’t need a ticket.
- Cloudflare DNS across all brands
- Mailgun transactional email
- Client self-service for routine changes
Ready to consolidate your IT under one managed partner?
If your contractor business is wrestling with multiple phone carriers, fragmented onboarding, DNS bottlenecks, or BEC and phishing exposure — we can help.
Get practical guidance for evaluating your Microsoft 365, security, telephony, and DNS posture. No commitment, no sales pressure.
Measurable outcomes for Cornerstone Companies.
A coordinated CEO impersonation campaign blocked across three rotating sender addresses. DNS migrated to Cloudflare with the GM able to make routine changes himself. Three phone carriers being consolidated into one Teams Phone platform. And a 96.6% lifetime ticket resolution rate across a high-volume onboarding period.
A growing contractor running on consolidated, secured, owner-friendly IT.
After partnering with Soaring Towers, Cornerstone Companies has the IT footprint of a much larger contractor — managed M365, enterprise security, owned DNS, and a telephony consolidation underway — without enterprise IT overhead.
-
CEO impersonation campaign blockedThree coordinated phishing emails impersonating the CEO — including a sender-address rotation tactic — detected and blocked through CIPP within 24 hours each.
-
DNS migrated to Cloudflare with client autonomyAll Cornerstone brand domains under Cloudflare, SPF/DKIM fixed, and direct access provisioned to JR — eliminating helpdesk dependency for routine DNS changes.
-
Three carriers consolidating into oneActive multi-carrier porting project retiring AT&T, RingCentral, and Office@Hand into Microsoft Teams Phone — eliminating per-carrier offboarding workflows for departed employees.
-
Process gap surfaced and flaggedAI-assisted triage caught a recurring new-hire licensing gap (two cases in seven days) — enabling a process improvement conversation with the client.
-
Security awareness program liveUsecure phishing simulations active across the team, with the Phish Alert Button add-in in Outlook giving employees a one-click way to flag suspicious email.
Coming soon...
The Contractor IT & Security Consolidation Checklist
Before making your next technology decision, evaluate whether your Microsoft 365, telephony, DNS, and security setup can keep up with the way you actually run. Our free checklist surfaces:
- Phone carrier fragmentation
- M365 licensing & identity gaps
- BEC & phishing exposure
- DNS & email continuity gaps
- Onboarding & offboarding friction
- Endpoint & PAM management
- 40+ IT & security checkpoints
- Microsoft 365 best practices for contractors
- BEC & phishing response recommendations
- Teams Phone consolidation guidance
- DNS & email security best practices
- User onboarding & offboarding workflow
A partner that consolidates the IT — not just the helpdesk.
Growing contractors need more than reactive support. Our business-first approach consolidates Microsoft 365, security, telephony, and DNS under one managed partner — and brings project-tier expertise when the work calls for it.
Answers for contractor and family-business leaders.
Don’t see your question? Reach out for a discovery call.
It includes full Microsoft 365 user lifecycle, an enterprise security stack (EDR, phishing simulations, threat response), Cloudflare DNS management with client self-service, Teams Phone consolidation, ConnectWise RMM across endpoints, and a managed helpdesk — designed around how a multi-brand specialty contractor actually operates.
Existing numbers are ported into Microsoft Teams Phone via a SIP provider (we use SIPPIO), 10DLC SMS is registered, and call queues are rebuilt — giving you one unified calling platform on every device. New hires get provisioned into a single queue instead of three carriers, and offboarding is a single workflow instead of three.
Through layered defenses: Microsoft Defender + Exchange Online Protection at the inbox, CIPP-driven sender and domain blocking when an attack is detected, Usecure phishing simulations to train staff, and the Phish Alert Button add-in so employees can one-click flag suspicious mail. When attackers rotate sender addresses, we block the new ones in under 24 hours.
Willingness to consolidate multiple vendors under one engagement, real Microsoft 365 and security expertise, project-tier capability for things like DNS migrations and telephony porting, comfort operating in non-standard environments (e.g., Rippling-driven device profiles instead of Intune), and a track record of catching process gaps before they become incidents.
The stack we deployed for Cornerstone Companies.
