Government Contractors
Backups of Contract Data That Are Encrypted, Off-Site and Tested.
Your contract files, drawings and proposals are what the business runs on. We back them up, protect the copies and prove they restore.
For contractors who cannot deliver to a prime or an agency without their data.
Backup and Ransomware Recovery for Government Contractors
Where Do Backups Fit Under NIST SP 800-171?
Media Protection (3.8) covers how media that holds CUI is protected, controlled and sanitized, and a backup is media. A copy of CUI is still CUI, so it needs the same care as the original.
That is the first design question for a contractor: what is in the backup, where it is stored, and who can reach it. We answer it before we configure the job.
What Gets Backed Up, and Where?
The important digital assets your business depends on: servers, key workstations, cloud mailboxes and shared files. Backups are encrypted and stored off-site, so a fire, a failed disk or ransomware on the office network does not take the copy with it.
Where CUI sits in an enclave, the backup plan for it is designed with our Compliance Division, so the copy does not end up outside the boundary.
How Do You Know a Restore Will Work?
We test it. Restores are tested and recovery procedures validated, so the first restore of a file is not during an emergency. Backup health is part of daily monitoring: a failed or stalled job is a ticket, not a surprise.
What If Ransomware Reaches a Contractor?
Picture a shared drive of drawings encrypted overnight before a delivery date. Ransomware protection sits in front of the backups: endpoint detection and response, application allow-listing, patching and staff training. If it gets in anyway, the incident response plan says who does what, we contain it, and we restore from a clean copy.
If covered defense information is involved, the incident may also trigger the reporting in DFARS 252.204-7012. Confirm what applies to your contract with your counsel.
What Is Included
6 PARTSOff-Site Encrypted Backups
Key data encrypted and stored away from the office.
Cloud Mailbox and File Backup
Microsoft 365 mail and files included in the backup plan.
Tested Restores
Restores tested and recovery procedures validated.
Backup Monitoring
Every failed job raises a ticket to our team.
Ransomware Protection
EDR, allow-listing and patching in front of the backups.
Incident Response Plan
A written plan, so the first hour of an incident is not improvised.
Frequently Asked Questions
4 QUESTIONSIs a backup of CUI also CUI?
A copy of CUI is still CUI, so it needs the same protection as the original. We design where it is stored with that in mind, with our Compliance Division where an enclave is involved.
We back up to an external drive. Is that enough?
Usually not. A drive that stays plugged in can be encrypted by ransomware along with everything else, and few are ever test restored. An off-site, encrypted copy that is tested is the standard to aim for.
Do you back up Microsoft 365?
Yes. Cloud mailboxes and files are part of the backup plan, because a deleted or encrypted mailbox is as much a loss as a server.
How often are backups taken?
Daily as a baseline, and more often for systems that change constantly. We scope it around how much work you can afford to lose.
More for Government Contractors
Managed IT and Help Desk
Unlimited remote support, monitoring and maintenance at a fixed monthly cost.
Microsoft 365 and Email Security
Microsoft 365 set up, secured and run, with email protection against phishing and spoofing.
Managed Security Monitoring (MDR and SOC)
Round the clock monitoring, detection and response from a security operations center.
Managed Security Monitoring (MDR and SOC) for Government Contractors
Virtual CISO (vCISO)
Senior security leadership, a roadmap and governance, without a full-time hire.
Government Contractors
IT support, managed security and CMMC experience for defense and federal suppliers.
Talk Through Your Backups.
Pick a time. Tell us where your contract data lives and what you cannot deliver without.
Looking for CMMC? Our Compliance Division, Capital Cyber Compliance, delivers it.
Under 25 people? Apply for an in-kind cybersecurity grant from Cyber Grants Alliance, a nonprofit. No cost to you.