TDB IT · IT and Security Operations
TDB IT is the in-house department that keeps TDB's own distributed, cleared workforce working inside agency systems every day. In 2026 we opened that capability to the partners we share programs with. Same team, same stack, same standard.
Why we exist
Through 2025, TDB relied on an outside managed service provider for IT and security. Sev 1 tickets waited a day for an acknowledgment. Routine requests took four or five. For a workforce that sits inside VA, DHS, and state systems, that's a program risk, not an inconvenience.
So we stood up TDB IT. The department began operating alongside the incumbent in October 2025, took over IT operations on March 1, 2026, and brought security operations in-house on July 1, 2026. Acknowledgment time dropped from a day to an hour. Most issues now close within a day, with hardware replacements taking up to three. TDB now owns every layer of its own IT and security.
That's the capability we offer partners. Not a service catalog written for a brochure, but the one we run on ourselves.
TDB IT begins operating alongside the incumbent MSP. Ticket resolution improves immediately.
IT operations fully in-house. Service desk, identity, devices, collaboration.
Security operations in-house. Managed EDR, Zero Trust allowlisting, DNS and email security owned and operated by TDB.
Partner support offering launched. NIST SP 800-171 alignment and CMMC readiness program underway.
Capabilities
Six service areas, delivered by one team with a single ticket queue. Partners get the same tiers, tooling, and response commitments TDB staff get.
Tiered support (Tier 1 through Tier 3) with a one-hour acknowledgment commitment, remote-first tooling, and on-site hands when a device has to be touched. Day-one technology prep and peripheral deployment for new cohorts, wherever they sit.
Microsoft 365, Entra ID, Teams, SharePoint, OneDrive, and Purview. Conditional access, MFA everywhere, lifecycle automation from onboarding form to provisioned account, and offboarding that actually closes every door.
Windows through Intune; Mac through Apple Business Manager with Automated Device Enrollment and Platform SSO. Zero-touch deployment, compliance policies, encryption enforced, and inventory that matches reality.
Managed detection and response with a 24/7 SOC, identity threat detection, SIEM, default-deny application allowlisting with ringfencing and storage control, DNS-layer security, and email threat defense. A deliberately small stack we can explain to an assessor line by line.
HIPAA-aware operations for programs that touch PHI, NIST SP 800-171 control alignment, a CMMC readiness program in progress, security awareness training, and acceptable use policies, including AI acceptable use, written for how contractor staff really work.
PSA and RMM for ticketing, patching, and remote support. Logic Apps that turn an onboarding form into accounts, licenses, and a shipped laptop. Dashboards your program manager can read without calling us.
The stack
Every tool below runs on TDB's own endpoints today. We chose each one for what it does inside a government contracting environment, and we kept the list short enough that we can defend every line of it.
Why TDB IT
TDB employees work in agency and partner environments every day, and TDB IT supports them there, even where we don't own the platform. We know the difference between a problem we can fix and one we have to escalate to your side, and we handle both without bouncing the user.
One hour to acknowledge, any severity. Most issues closed within a day; hardware replacements within three. We publish these numbers because we hit them, and we'll report them to you monthly.
The stack above protects TDB's own data, our clients' PHI and PII, and our own reputation. We run it, tune it, and respond to it. A partner inherits a mature, operated program rather than a shelf of licenses.
Remote-first since day one. We've shipped and stood up cohorts of remote staff across multiple states with day-one connectivity and peripherals in hand, under program timelines that didn't move.
Bringing IT in-house cut TDB's outside IT and security spend to zero while service levels improved. Partners get that same economics: a right-sized team on a predictable monthly model, not a per-incident meter.
We're aligning to NIST SP 800-171, running a CMMC readiness program, and evaluating SOC 2. We'll tell you exactly where we are on each, with evidence, because that's what we'd want from a partner.
Engagement model
Four phases. Each one ends with a decision point, so you're never further in than you chose to be.
Two weeks. Inventory of users, devices, identities, and the systems your staff touch. A written findings memo and a scope you can take to procurement.
Service desk live, ticket SLAs in force, device compliance enforced, MFA and conditional access everywhere. Security tooling deployed and tuned.
Steady state. Monthly service reports, quarterly reviews, patching and vulnerability cadence, onboarding and offboarding automated.
Compliance evidence collection, policy program, tabletop exercises, and the roadmap that gets you to the framework your contracts require.
CIRP, DTL-MIT, ARMC-ISACA. Roughly 24 years in IT and cybersecurity, including development lab security at Oracle, IT Director at Cogent Communications, and ScamTracker 2.0 at the Better Business Bureau. Founded TDB IT in 2025 and leads it across a combined CIO and CISO scope.
The team
TDB IT is a tiered team covering Tier 1 through Tier 3, security platform operations, and data analysis, led by a director who owns both the CIO and CISO roles. Small enough to know every endpoint. Structured enough to run a partner's environment as its own.
TDB IT also holds the IT and security seat in every Innovation and AI Lab Discovery Pod, which is how the Lab's data rules get enforced rather than just written.
Start with the two-week assessment. You'll get a findings memo and a scope, whether or not you go further with us.
