Everything people ask, in one place
Frequently Asked Questions
Straight answers on pricing, security, hosting, compliance, and how we work — each with a link to the full detail. Can't find yours? Ask the owner directly.
About CRC Cloud
What is CRC Cloud?
CRC Cloud is a Newport Beach, California provider of managed IT, cybersecurity, and private cloud hosting — an MSP, MSSP, and CSP in one accountable partner. Its roots go back to 1983 as Computer Research Center. Today it serves Orange County, Los Angeles, San Diego, the Inland Empire, and clients nationwide. About CRC Cloud →
Is CRC Cloud an MSP or an MSSP?
Both, plus a cloud services provider (CSP). Core IT is the MSP layer, Secure IT adds the MSSP layer with a 24/7 security operations center, and Cloud Complete adds private cloud hosting — on either plan — on infrastructure CRC Cloud owns in a Southern California datacenter. See the plans and published pricing →
How long has CRC Cloud been in business?
The lineage runs continuously from 1983 — Computer Research Center, through CRC Computer Supplies and classroom training documented in college catalogs and press through the 1980s and 90s, to today's CRC Cloud. The receipts — catalogs, news coverage, the 1992 LA Times column — are published on the heritage page. See the 40-year archive →
Where is CRC Cloud located?
Headquarters: 4695 MacArthur Ct, 11th Floor, Newport Beach, CA 92660 (visits by appointment). A secure operations office operates in Irvine, CA — its location is shared with clients only, part of our security-through-discretion policy. Support is remote-first, with on-site included within 175 miles of Newport Beach and billed at $145 an hour plus travel beyond it — our own engineers travel wherever the work needs hands, and Southern California clients get the fastest onsite response from our Newport Beach base. Service areas →
Pricing & plans
How much do managed IT services cost?
Southern California market rates run roughly $100–$400 per user per month. CRC Cloud publishes its pricing: Core IT $125 per user/month, Secure IT $250 per user/month with the 24/7 SOC, and Cloud Complete from $175 per user/month for private cloud hosting ($300 with the 24/7 SOC). The pricing page includes a live cost calculator. See pricing & calculator →
What contract terms does CRC Cloud use?
A one-year initial term, then month-to-month with 60 days' notice and no exit fees. Your documentation — passwords, configurations, network maps — is yours from day one, kept current, and handed over cleanly if we ever part ways. Plan details →
What is included in Core IT at $125 per user?
Unlimited helpdesk and onsite support, proactive 24/7 monitoring, patching and updates, email, identity and device management with MFA, disk encryption, and vendor and asset management — a complete IT department at a flat per-user rate. Managed IT details →
Per-user or per-device IT pricing — which is better?
Per-device can cost less when many people share a few machines or for unattended kiosks; per-person wins when each person uses a computer all day, because one number covers their workstation, mailbox and everyday peripherals. On any per-device quote, check whether servers, firewalls, mailboxes and the security stack are separate lines, and whether a monthly minimum raises the real rate for a small office — the unit price is not the monthly total. CRC Cloud prices per person, with the full arithmetic published and worked in the open. The worked comparison math →
Is the 30-minute assessment really free?
Yes — 30 minutes on the phone with the owner, structured around the NIST Cybersecurity Framework 2.0. You leave with a read on your posture and a ballpark monthly number against published pricing, whether or not you hire us. Book the assessment →
Security & the SOC
What does the 24/7 Security Operations Center actually do?
Humans plus tooling watching around the clock: managed detection and response (MDR), SIEM log intelligence, dark-web monitoring, and containment authority — threats get isolated at 2 a.m., not discovered at 9. It ships inside Secure IT rather than as an add-on. Cybersecurity & SOC →
What is the difference between an MSP and an MSSP?
An MSP keeps IT running — helpdesk, hardware, updates, uptime. An MSSP keeps it safe — threat detection, response, compliance alignment. Most businesses otherwise juggle two vendors; CRC Cloud operates as both in one accountable partner. MSP vs MSSP compared →
How fast does CRC Cloud respond?
The published standard is measured on client tickets: 15 minutes during business hours (6 AM–6 PM PT, Monday–Friday) and 60 minutes nights and weekends. Clients get 24/7/365 helpdesk coverage with escalation to senior engineers, plus the SOC watching continuously regardless of the hour. If we miss the published standard on more than 10% of your tickets in a quarter, you may terminate — including inside the initial term. Support center →
Private cloud & your data
What makes CRC Cloud's private cloud different from AWS or Azure?
Public cloud rents you a metered slice of a hyperscaler. CRC Cloud runs your servers and applications on a redundant pool of servers we own — network, power, internet, storage, and compute all redundant — replicating to a geo-separate site. Predictable monthly cost, one accountable partner — and colocation is available if you'd rather run your own hardware in our facility. Private cloud details →
Where is my data hosted?
In a carrier-neutral Southern California datacenter engineered to a concurrently maintainable, Tier III-standard design, whose operator holds SOC 1 and SOC 2 Type II attestations, ISO 27001 and PCI-DSS certifications and NIST 800-53 (PE) High alignment — those are the facility operator's credentials, not CRC Cloud's — with N+1 power and cooling, a 99.9% uptime service level, and geo-separate replication. The exact location stays confidential by design — that discretion protects clients. Datacenter details →
Do you own the datacenter?
We own the infrastructure — the servers, storage, and network your workloads run on — housed in a third-party facility held to published standards. That distinction is stated plainly because it matters: the facility's certifications belong to the facility; the hardware, architecture, and accountability are ours. How the facility is certified →
Compliance
Can CRC Cloud make us compliant with CMMC, SOC 2, or HIPAA?
No provider can truthfully sell "compliance" — we align, assess, prepare, and implement and manage controls; certification and audit belong to authorized assessors and auditors. Our practice is built on the NIST Cybersecurity Framework 2.0, and we prepare clients for CMMC, SOC 2, DOL cybersecurity expectations, ALTA Best Practices, and the IRS WISP. Compliance alignment hub →
Do you work with defense contractors on CMMC?
Yes — CMMC 2.0 alignment for small defense suppliers is a core lane, including NIST 800-171 control implementation and assessment preparation. The Department of War suspended the Phase 2 third-party assessment phase-in on July 13, 2026; DFARS 252.204-7012, NIST 800-171, and your SPRS score and annual affirmation are unaffected and still apply. CMMC alignment →
Working with us
You're a small team. What happens if the person who knows our network is unavailable?
A fair question, and the answer is structural rather than reassuring. Every engineer here is senior — there is no junior first line whose job is to take a message and escalate, so the person who picks up your ticket is qualified to resolve it. Each client is assigned a named account manager who owns every ticket end to end: coordinating the help desk, doing the work, and reporting back. Behind that person sits a designated backup who already knows your environment and steps in when they are unavailable, so cover is assigned in advance rather than improvised. And we run 24/7 — outside business hours there is always a senior engineer available, not an answering service taking a message for the morning. Your environment is documented in our systems rather than carried in someone's head, and that documentation is yours to take whenever you ask. Trust & Security Center →
We already have an IT person or team. Is this still useful?
That's what co-managed IT is for: your team keeps operations, we add the 24/7 SOC, the tooling, escalation depth, and a vCIO strategy layer. It works as a partnership, not a replacement. Co-Managed IT →
What happens on the free assessment call?
Thirty minutes, the owner, no script: headcount, servers and endpoints, key vendors, how IT and security are handled today, cloud services in play. You get a structured posture read and a ballpark retainer number. If you want a precise written quote, the next step is a paid IT discovery ($1,500–$4,500 by environment, published on the rate card) — credited in full against your first invoice when you sign. What the call covers →
How do I get support as a current client?
The 24/7/365 helpdesk — phone, text, email, chat, or portal, whichever you prefer. Every channel is listed on the support center page. All support channels →