ITAssurance℠ CEO, Bill Campbell joins CMMC Professionals Network (CPN) Board of Directors.

Comprehensive IT Solutions, Delivered with Assurance

Each service below does one job well, and each one comes with reports you can see. Pricing is in writing before you sign.

ITAssurance℠ – Managed IT Services

Day-to-day IT support for your people and devices, from a Maryland team.

Features:

Ideal For: SMBs without an internal IT team or those looking to augment existing staff.

SecurityAssurance℠ – Cybersecurity Services

Security work included with managed IT, with Advanced tiers for businesses that need more.

Features:

Ideal For: Regulated industries, companies with remote teams, and any business handling sensitive data.

DataAssurance℠ – Backup and Recovery

Backups you can see working.

Features:

Ideal For: Any business that can’t afford data loss or downtime.

CloudAssurance℠ – Managed Azure and AWS

Your cloud servers, managed like the rest of your IT.

Features:

Ideal For: Businesses running servers or applications in Azure or AWS.

VoiceAssurance – Cloud-Based Phone Systems

A smarter, simpler way to stay connected.

Features:

Ideal For: Businesses upgrading from legacy PBX or unreliable phone systems.

Built for Small and Midsize Businesses

We work with small and midsize organizations in Maryland, Virginia and DC, including healthcare practices, defense contractors, manufacturers and professional firms. We learn how your business runs before we change anything.

Serving Maryland businesses since 2004.

help of coworker 500x500 1

Industries we serve

Every industry answers to someone, whether that's a regulator, a prime contractor or an insurer. Here's what each one asks for, and the work ITAssurance℠ does toward it.

Healthcare practices

"The front desk has to work at 8am, and patient records can't end up where they shouldn't."

What you answer to

HIPAA Security RuleHIPAA contingency planning

MFA for access control, plus backup reports and test restores for your contingency plan.

Healthcare IT →

Government contractors

"Our contract has a CMMC clause and a date, and we don't know what's left to fix."

What you answer to

CMMCDFARS 252.204-7012NIST SP 800-171SSP and POA&M

We remediate the gaps. SecurityAssurance℠ Advanced + CMMC runs the technical security controls and produces the evidence, and ComplianceAssurance℠ keeps your SSP and POA&M up to date.

Government contractor IT →

Manufacturers

"If the plant floor network goes down, so does the shipping schedule."

What you answer to

CMMC flow-downDFARS 252.204-7012NIST SP 800-171 (CUI)

If your drawings and specs hold controlled unclassified information, we build the controls your framework calls for and maintain the evidence that the work was performed.

Manufacturing IT →

Construction

"Our crews work from job sites, and one fake payment request could cost us a whole draw."

What you answer to

FAR 52.204-21CMMCDFARS 252.204-7012

On federal and defense jobs, SecurityAssurance℠ Advanced + CMMC runs the technical security controls and produces the evidence.

Construction IT →

Automotive dealerships

"We arrange financing, so the FTC treats us as a financial institution."

What you answer to

FTC Safeguards Rule

The Safeguards Rule requires MFA for anyone accessing your information systems. We put it on every account we manage.

Dealership IT →

Law, accounting and financial firms

"Client files are the business. Losing them, or leaking them, isn't an option."

What you answer to

FTC Safeguards Rule (tax preparers)ABA Model Rule 1.6SEC Regulation S-P

MFA on every account we manage, and backup reports with test-restore results, shared with you.

Talk to us →

Nonprofits

"We keep donor records and take card donations, on a nonprofit budget."

What you answer to

Maryland PIPA

Maryland's data security law calls for reasonable security, nonprofits included. We start with MFA, backup reports and test restores, and monthly patch reports.

Nonprofit IT →

Small and midsize businesses

"Our cyber insurance form asks about MFA and backups, and we're not sure what to check."

What you answer to

Cyber insurance questionnairesMaryland PIPA

Insurance forms ask about MFA and backups. We put MFA on every account we manage and show you backup reports and test-restore results.

Small business IT →
Every client, every industry
  • MFA (multi-factor authentication) on every account we manage, including admin and email
  • Backup reports and test restores, with the results shown
  • Monthly patch reports

Have a CMMC clause in a contract? Tell us the date and we'll tell you what remediation involves.

Tell us your date

Our work supports your compliance program. It doesn't guarantee compliance, certification or audit results. We're an MSP, not an insurance advisor. Coverage and claim decisions rest with your insurer and broker.

What Sets ITAssurance Apart

Here’s what you can hold us to.

Our Value Pillars:

Local and Onsite

A Maryland team. Two hours of travel included with every onsite visit.

Security Built In

MFA on every account we manage, including admin and email, and monthly patch reports.

Explained

Every process walked through in plain English.

Transparent

Clear tiers, and pricing in writing before you sign.

Proof, Not Promises

Backup reports, tested restores and monthly patch reports, shared with you.

A Proven Process, Built Around Your Business

Assess

We review your environment, risks and goals before we propose anything.

Align

We agree the services, priorities and pricing with you, in writing before you sign.

Assure

Support, patching and reporting in place, with monthly patch reports you can read.

With DataAssurance℠, you review backup reports and test-restore results with us every quarter.

Frequently asked questions

What does ITAssurance℠ do?

ITAssurance℠ is a managed service provider (MSP) for small and midsize businesses in Maryland, Virginia and DC. We run day-to-day IT support, cybersecurity, backups and cloud services, and we show you the evidence that the work is done. Serving Maryland businesses since 2004.

What evidence do we get that the work is being done?

Monthly patch reports. We share backup reports with our clients and walk through them every quarter, and we run test restores and show clients the results. MFA (multi-factor authentication, a second check at sign-in) is on every account we manage, including admin and email.

Do you work alongside an internal IT person?

Yes. Co-managed IT means we support your internal IT person while they stay in charge of what they know best. Talk to us about what that looks like for your team.

How does pricing work?

Pricing in writing before you sign. Two hours of travel included with every onsite visit. Unlimited devices per user.

Do you help with Cybersecurity Maturity Model Certification (CMMC)?

Yes, with fixing the gaps and running the technical security controls. SecurityAssurance℠ Advanced + CMMC runs the technical security controls and produces the evidence. ComplianceAssurance℠ keeps your System Security Plan (SSP), Plan of Action and Milestones (POA&M) and security policies up to date, month to month. The SSP describes how you protect sensitive defense information; the POA&M tracks the gaps still being closed.

Our work supports your compliance program. It doesn't guarantee compliance, certification or audit results.

Services and terms vary by agreement. Pricing is always provided in writing before you sign.

"Prove it" means creating and maintaining evidence that demonstrates the work we perform, not guaranteeing compliance, certification, audit outcomes, or the effectiveness of third-party systems.

Let’s Put the Assurance Back in Your IT

Start with a conversation about how your business runs and what isn’t working. We’ll walk you through how we’d support it, and pricing comes in writing before you sign.

Talk to Us

Tell us a little about your business and we’ll be in touch.

Proudly Serving Maryland, Virginia, and DC Businesses

We’re a Maryland team serving Maryland businesses since 2004, with clients across Maryland, Virginia and DC.

Service Areas Include: