LBT Technology Group Is Now SPECTRA Certified: What It Means for You

We have some good news to share: as of Wednesday, September 30, 2026, LBT Technology Group, LLC is officially SPECTRA Certified.

If you've never heard of SPECTRA, you're not alone. Most business owners don't spend their days thinking about IT certifications, and they shouldn't have to. That's our job. But this one is worth a few minutes of your time, because it affects how well your business is protected, and it may even lower what you pay for cyber insurance.

In this post, we'll explain what SPECTRA Certification is, what we had to prove to earn it, and what it means for you, whether you're already a client or you're looking for an IT partner.

Lollipop marzipan apple pie oat cake sweet roll carrot cake toffee dessert marzipan. Gummi bears jelly-o liquorice lollipop chocolate bar. 

Pastry jelly jelly sugar plum jelly tiramisu cupcake sugar plum. Pastry pie pudding tiramisu donut ice cream candy. Sweet marshmallow soufflé pudding. Marzipan macaroon jelly beans. Croissant gummi bears chupa chups sugar plum tootsie roll apple pie cupcake.

Candy sweet roll jelly beans candy marzipan. Powder jelly-o cookie sweet roll tart pudding croissant bonbon pudding. Gummi bears caramels donut carrot cake carrot cake chupa chups bonbon tootsie roll.

Enter your text here ...

First, a Quick Question: How Do You Know Your IT Provider Is Secure? 

Think about everything your IT provider can reach: your computers, servers, email, passwords and user accounts, your firewall (the front door between your network and the internet), and your backups.

To do the job well, an IT provider needs access to almost all of it. But that raises a fair question: if your IT provider has the keys to your business, how do you know they're keeping those keys safe?

For years, the honest answer was "you take their word for it." Most IT companies say they're secure, but one provider's "fully monitored" can mean something very different from another's. Meanwhile, criminals know that breaking into one IT provider can open a path into many businesses at once. So your IT provider's security isn't just their problem. It's yours, too.

SPECTRA Certification was created to close that gap. 

What Is SPECTRA Certification? 

SPECTRA Certification sets a minimum-security standard for Managed Services Providers, the companies (like us) that manage IT for other businesses. To earn it, a provider has to show that it protects its own company and the client businesses it takes care of.

A few things make SPECTRA stand out:

• It focuses on what actually causes losses, such as ransomware, email scams, and weak backups.
• It's vendor neutral. It cares whether the protection works, not whose logo is on it.
• Insurance companies use it and recognize it. SPECTRA Certification is recognized by Lloyd's of London syndicates and by insurers including Dual and Ledgebrook, who use it to evaluate risk.
• It keeps evolving. Threats change constantly, so SPECTRA is built around continuous improvement.

What We Had to Prove: Protecting Our Own House

The first half of SPECTRA looks inward. Before we can protect your business, we have to show that our own company is locked down.

Clear promises and a plan for emergencies. We need defined service commitments and a written, practiced plan for handling security incidents. Nobody should be making it up as they go.

A trained team. Our staff receives regular training, including security awareness and phishing training. Phishing emails, the fake messages designed to trick people into clicking a bad link or handing over a password, are still one of the most common ways attacks begin.

Checking our own vendors. We assess the risk of the third-party tools and companies we rely on. A chain is only as strong as its weakest link.

Staying current on threats. We build up-to-date threat intelligence into how we plan and protect.

Testing ourselves. We regularly run penetration tests and vulnerability scans. A penetration test is a controlled, authorized attempt to break in, so weaknesses are found and fixed before a criminal finds them.

"Never assume, always verify" access. SPECTRA requires zero-trust access and segmentation. In plain language, nobody and nothing gets automatic access just because it's "inside." Every connection is verified, and systems are kept separate. If something went wrong in one place, these walls are designed to keep it from spreading into your business. 

What We Had to Prove: Protecting Your Business

The second half of SPECTRA looks at the services we deliver to you, and this is where it gets specific.

At least 99% of your computers and 100% of your servers must be connected to our central monitoring, along with all of your internet-facing network equipment and the user accounts and mailboxes we manage. Everything is watched 24 hours a day, 365 days a year, and we have to be able to stop a threat, not just send an alert.

Why it matters to you: Attackers don't keep business hours. Many strike at night, on weekends, or over holidays. And a single unmonitored laptop can be the open window they need.

Your firewall must run current software, be set up to avoid a single point of failure where needed and hold up against attacks designed to knock you offline.

Why it matters to you: An outdated firewall is like a lock with a known flaw. Keeping it current keeps you connected and protected.

SPECTRA requires at least two separate copies of your recovery data, including one copy that can't be changed or deleted and is kept isolated. Backups must run automatically and be tested every quarter.

Why it matters to you: Modern ransomware often hunts for your backups and tries to destroy them, so you have no choice but to pay. A backup that can't be altered is your safety net. And a backup that's never been tested is really just a hope, so we test on a regular schedule.

SPECTRA requires a ready copy of your key systems running on separate infrastructure, protected to the same standard as your main systems, and tested every year.

Why it matters to you: Fires, floods, hardware failures, and cyberattacks happen. Disaster recovery is the difference between getting back to work quickly and being down for days or weeks.

Advanced threat detection software (often called EDR) must be installed on 99% or more of your computers, with important files backed up and 24/7 response available.

Why it matters to you: Traditional antivirus looks for known threats. This newer protection watches for suspicious behavior, so it can catch attacks nobody has seen before.

Business email compromise is when criminals pose as a boss, vendor, or client to trick someone into sending money or sensitive information. SPECTRA requires:

• Multi-factor authentication (MFA), the extra step, like a code on your phone, that stops criminals even if they steal a password.
• DMARC, an email setting that makes it much harder for scammers to send fake emails that look like they came from your company.
• Secure email filtering to catch dangerous links and attachments.
• Ongoing security training so your team knows what to watch for.

Why it matters to you: One convincing fake invoice can cost a business tens of thousands of dollars. 

Real Benefits You Can See: Insurance Savings and SpectraCare

Stronger security is the main goal, but SPECTRA Certification also comes with practical benefits for our clients.

Because LBT Technology Group is SPECTRA Certified, our clients may qualify for up to a 15% discount on their cyber insurance through SPECTRA's network of insurance partners.

Cyber insurance has become more expensive and harder to get in recent years, with insurers asking more detailed questions about how businesses are protected. Working with a certified IT provider gives insurers independent evidence that strong protections are in place. Your insurance carrier always makes the final decision on eligibility, coverage, and pricing, but this is a real opportunity to save. If you'd like to explore it, we'll gladly help connect you with the right people.

Our certification also includes SpectraCare, a warranty program backed by a $100,000 protection pool. If a certified service fails to perform as it should during a qualifying cyber incident, SpectraCare is designed to pay directly to the affected client, not to us.

In other words, SPECTRA puts money behind the protections we've certified. Like any warranty, SpectraCare has its own terms and conditions, and we're happy to walk you through how it works. 

What This Means If You're Already an LBT Client

• Peace of mind backed by proof. Our protections have been measured against an independent standard trusted by insurers.
• A chance to lower insurance costs. You may qualify for up to 15% off your cyber insurance.
• An extra layer of financial protection through SpectraCare.
• An easy answer when others ask. Your clients, partners, and auditors increasingly want to know how your vendors protect data. Now you can tell them your IT provider is SPECTRA Certified.
• Recovery that's been tested, with backups checked quarterly and disaster recovery tested annually. 

What This Means If You're Looking for an IT Partner

Many IT providers say similar things. A certification like SPECTRA gives you an objective way to compare. Whoever you're talking to, including us, here are a few good questions to ask:

• Do you hold an independent security certification for your own company?
• What percentage of my computers and servers will be monitored, and is someone watching 24/7?
• Do you keep a backup copy that can't be changed or deleted, and how often do you test it?
• If your company was breached, what keeps that problem from spreading to my business?
• Could working with you help lower my cyber insurance costs?

A strong provider should answer each of these clearly and specifically. As a SPECTRA Certified provider, we're happy to walk you through everyone. 

Our Commitment Going Forward 

SPECTRA calls its certification a trusted mark of quality and risk management maturity. We see it as confirmation of something we've believed from the start: good security has to be part of how an IT provider work every day, not an extra you pay for after something goes wrong. It's the same thinking behind our flagship Managed Risk & Support Protection program. 

A BIG THANK YOU to our team, who put in the work behind this milestone, and to our clients, who trust us with their businesses. We'll keep working to maintain that trust.