Security Standards and Trust at NRVPC

The security standards every NRVPC client runs on, set out in plain language so you can check them before you sign.

Download NRVPC's capabilities statement (opens in a new tab) (PDF, one page)

Navy security key with an orange touch disc plugged into the USB port of a silver laptop on a white desk, soft daylight

How does security work at NRVPC?

NRVPC is a managed service provider (MSP) based in Fairfax, Virginia.

Every client, in every industry, runs on the same security baseline, set out below in plain language. The framework behind it is the CIS Controls, the Center for Internet Security's published list of security practices.

Each quarter, your leadership reviews your environment with us, including a security check of spam filtering, sign-in locations, and the reports from your security tools.

What security standards does every NRVPC client get?

The NRVPC security baseline, and what each standard means for you
StandardWhat it means for you
MFA on all email and VPNA stolen password alone does not open an account
Documented firewall rulesA managed Sophos, SonicWall, or UniFi firewall, set up for your office
Managed endpoint security on every computerSecurity software on every company-owned computer, managed by NRVPC
Encryption on every device holding sensitive dataA laptop left in a cab does not give up its data
Least-privilege accessEach person has the permissions their role needs, and no more
No end-of-life equipment or operating systemsNothing on your network has stopped getting security updates
All servers under warrantyEvery server is covered, and new devices carry a 3-year minimum warranty
Quarterly security auditsEvery quarter, spam filtering, sign-in locations, and your security tools' reports are checked and reviewed with your leadership
Employee security awareness trainingYour staff are trained to recognize suspicious emails and requests

These standards are how we maintain 99.99% uptime across our client base.

What can you expect from NRVPC's support?

Engineers respond during business hours, Monday to Friday, 8 a.m. to 5 p.m., with a 12-minute average response time. Monitoring runs 24/7, and after hours clients have an emergency line.

  • 8-minute average issue detection
  • 63% of issues resolved remotely, within the hour
  • 98% of calls answered
  • One-hour on-site response across the Washington, D.C. area

How does NRVPC work with every client?

  • Your environment, documented

    A documentation base for your office: photos of the network rack, every access point by name, and how-to articles written for your setup.

  • Access that follows your staff

    New hires are set up with their accounts, MFA, and a managed computer. When someone leaves, their access is closed.

  • A person you know answers

    Your call is answered by a person you know by name, with no queue, and you have direct access to the engineers who support your office.

Which certifications and platforms does the team work with?

  • CompTIA A+
  • CompTIA Network+
  • CompTIA Security+
  • CompTIA SecurityX (formerly CASP+)
  • Carbon Black
  • Microsoft 365 and Google Workspace
  • Sophos, SonicWall, and UniFi firewalls
  • Windows-primary, with Mac supported

Who is NRVPC, on paper?

NRVPC company details
Legal nameNRVPC, LLC
Founded2006
AddressVentureX Fairfax, 3060 Williams Dr, Suite 300, Fairfax, VA 22031
Business hoursMonday to Friday, 8 a.m. to 5 p.m., with an after-hours emergency line for clients
ServesOrganizations with an office near the Virginia I-495 corridor, plus Northwest Washington DC and Bethesda, MD
Unique Entity ID (UEI)JAAYBKHJRDA3
CAGE code9DVG5
NAICS codes541512, 541519
Sales(571) 746-9074, sales@nrvpc.com
Help desk (existing clients)(703) 400-6937, helpdesk.nrvpc.com (opens in a new tab)

Download NRVPC's capabilities statement (opens in a new tab) (PDF, one page)

Frequently asked questions

What does NRVPC check in the quarterly security review?

Spam filtering, sign-in locations, and the reports from your security tools, alongside the last three months of tickets, reviewed for patterns. The findings are reviewed with your leadership.

When do NRVPC's engineers respond?

Monday to Friday, 8 a.m. to 5 p.m., with a 12-minute average response time. Monitoring runs 24/7, with an 8-minute average issue detection. After hours, clients have an emergency line, and one-hour on-site response covers the Washington, D.C. area.

What happens in an IT Assessment

In an IT assessment, you and Zach Launey, NRVPC's President, review your current environment, security and compliance. It ends in recommendations and a roadmap.

  1. A 15-minute intro call

    You tell Zach your objectives, what you wish were different about your IT, and what you would have technology do if you could wave a magic wand.

  2. A review of your environment

    We review your devices, network, platforms, and security posture. If you have an office, that means about an hour there, looking at your network equipment and printers. Fully remote teams meet on a video call.

  3. Recommendations and a roadmap

    Then we show you exactly what a managed plan would cover.

Eric Campbell, NRVPC's Chief Technical Officer, joins when needed.

Want to see where your security stands?

Book an IT Assessment to review your current environment and security with Zach Launey, NRVPC's President.