Scoping call
Your customers, your contract requirements, your systems and the last incident that cost you real time.
Virginia Beach, Virginia
Orca IT supports Virginia Beach and Hampton Roads businesses remotely from Gilbert, Arizona. Family owned since 2015, never outsourced, and experienced with the security paperwork that flows down from defense contracts.
Overview
Hampton Roads runs on defense and the sea. Naval aviation, expeditionary bases, shipbuilding and repair, marine logistics, port operations and the enormous supplier network around all of it dominate the regional economy, with a large tourism and hospitality sector on the oceanfront alongside.
For a small business here, the defense connection usually shows up as a clause. A prime contractor sends flow-down security requirements, or a customer sends a questionnaire, and suddenly a twelve-person machine shop or engineering firm has to explain its access control policy, its logging, its media handling and its incident response plan. Most of those businesses have good people and no documentation. We fix the second part while making the first part true: MFA and conditional access enforced, endpoint detection and response deployed, drives encrypted and verified, removable media controlled, standard builds documented, logs centralized and retained, and backups made immutable and restore-tested. That work sits under Pod Guard.
We say the boundary out loud. Orca IT implements and documents technical controls and produces evidence. We are not an authorized assessor and cannot certify anyone under CMMC or any other framework. Providers who imply otherwise are describing a service that does not exist. What we can do is make sure that when someone finally checks, the answer is yes and there is a record to back it up.
Maritime and logistics clients have a different pressure again. Ship repair, marine services and freight businesses work to schedules set by vessels and berths, not by office hours, and their systems, job costing, scheduling, procurement, document control, have to be available when crews are working. We monitor those continuously and design redundancy where an outage would genuinely stop work. Hospitality businesses along the oceanfront bring point of sale, property management systems, booking platforms and guest Wi-Fi that must be completely separated from anything touching payments. Professional and medical offices around Town Center and Lynnhaven need the fundamentals done well and a help desk that answers the same day, which is what Pod Care provides at a flat monthly per-user cost.
Storm planning is not optional on this coast. A recovery plan that assumes someone can reach the building is a plan that fails in a hurricane or a nor'easter. We build offsite, immutable backups held well away from the region, documented recovery procedures written for a manager rather than an engineer, managed laptops so staff can work from anywhere, and tested restores with recorded recovery times. We do that testing in the calm months on purpose.
On timing, Virginia observes daylight saving and Arizona does not. From March to November we are three hours behind you; from November to March, two. Your workday is fully covered from our late morning onward, and our remaining afternoon, your evening, is where server work, patching and migrations belong. Pod Watch monitoring runs continuously and Pod Care includes after-hours emergency response. We use the same model for clients in Washington DC and Charlotte; see remote support or the full city index.
If your contract requires a specific enclave, government cloud tenancy or an environment we should not touch, tell us early. We would rather scope it honestly than discover it halfway through an onboarding.
Included
Six areas we work through with defense, maritime and coastal businesses.
The technical requirements your prime passes down, built properly and documented with baselines, policies and evidence you can hand over.
MFA everywhere, conditional access, separate admin accounts and access reviews recorded so removals can be proven.
Immutable backup copies held outside the region, documented recovery order and restore tests run before hurricane season starts.
Monitoring and redundancy for job costing, scheduling and document control systems that crews depend on outside office hours.
Guest Wi-Fi, point of sale and back office split onto separate segments so a compromised tablet cannot reach a payment terminal.
Managed laptops and tablets for staff working at yards, piers and customer sites, encrypted and wiped remotely if lost.
How It Works
Your customers, your contract requirements, your systems and the last incident that cost you real time.
Free remote assessment across endpoints, identity, network, backup and documentation, ranked by risk.
Missing controls implemented in priority order, with the policies, baselines and records produced alongside them.
Flat monthly management with continuous monitoring, help desk and a Surface Check review each cycle.
Eastern-time windows rarely cost Hampton Roads clients any downtime.
Three hours from March to November and two hours from November to March, because Arizona never adjusts its clocks for daylight saving. Our engineers cover your afternoon fully, and the hours after your close of business are our normal working time, which is where scheduled maintenance goes.
Start with an inventory, because you cannot protect what you have not listed. Our free assessment produces that inventory and maps the obvious gaps. From there we implement in risk order: identity and MFA, endpoint protection, encryption, logging, media control and backup evidence.
No. Certification comes from an authorized third-party assessor. We implement the technical controls, document configuration baselines and produce the evidence an assessment requires. That implementation and documentation work is what most small suppliers genuinely need.
We assume the building is unavailable. Backups are held offsite and immutable outside the region, critical systems are replicated or cloud-hosted where practical, staff work on managed laptops from anywhere, and recovery steps are documented in plain language. We test restores in the calm months.
On the infrastructure side, yes: network segmentation, wireless design, workstation and terminal management, connectivity and backup. Your POS or property management vendor keeps responsibility for their application, but we keep the environment around it stable and properly separated.
No long-term contract is required. Pod Care is flat monthly per-user pricing on a month-to-month basis, you own your hardware and licenses, and the initial assessment costs nothing with the report yours to keep.
Family owned in Gilbert, Arizona, and honest about what we can and cannot certify.
Talk to Your Pod
Our free Deep Dive documents your endpoints, identity, network and backups and produces a ranked gap list. It is the cheapest way to find out where you actually stand.
(602) 677-0779Family owned in Gilbert, AZ since 2015 · onsite across the Phoenix metro · remote support nationwide · never outsourced
A few details and your pod gets right back to you, usually the same business day.