Technology should serve teachers — not the other way around. We keep your schools running, so educators can focus on students.

Three things, in order: immutable offsite backups tested by actually restoring from them; MFA on every adult account (including the superintendent, the board, and the principal who travels); and an incident-response plan with named roles, a comms lead, and an annual tabletop drill. We get districts through these in 60-to-90-day phases without taking the help desk offline.

Co-managed IT — how nearly every district with an IT director works with us. The director keeps strategic ownership (vendor relationships, board reporting, instructional-tech direction). We take the help desk, after-hours coverage, summer projects, and cybersecurity operations. We work in their ticketing system, or stand up a new one — whichever they prefer.

Category One funds connectivity (Internet, fiber); Category Two funds internal connections (Wi-Fi, switches, firewalls). RRG delivers eligible infrastructure under E-Rate and coordinates with your E-Rate consultant or USAC filing. Managed services and ongoing cyber operations generally aren't E-Rate eligible (those run on operating budget) — but the network and Wi-Fi refresh that ransomware response often surfaces almost always is.

Treat it as a potential FERPA incident until proven otherwise. We help districts preserve audit logs from the SIS, LMS, and SSO before they roll off retention; reconstruct the access path (session hijack, misconfigured share, vendor bug, or a parent screenshot of their own kid's screen); and draft the family communication and any FDOE incident report. The right time to run this drill is before the email arrives — which is what an annual tabletop gets you.

Almost never the right move once both stacks are entrenched. M365 owns the back office; Google owns the classroom. Migrating either direction means retraining staff and re-paying for licenses you already own. The high-leverage work is making the seam invisible: real SSO from Clever or ClassLink, Entra federated to Google, off-boarding that fires in both ecosystems at once, and Intune + Google Admin policies that don't contradict each other.

Both places, for different reasons. Google Drive exposure comes from "anyone with the link" defaults and teacher sharing patterns. OneDrive and SharePoint exposure tends to come from team sites a department stood up and never re-permissioned. We harden both tenants the same way: DLP for Florida student-record patterns, external-sharing controls scoped by org unit, and audit logs piped to long-term storage — without breaking the legitimate sharing teachers rely on.

Not all of it. Small charters usually need: a real backup of your SIS and Google/M365 tenant, MFA on every adult account, a content filter that satisfies CIPA, an honest device-management baseline, and a phone number for the day something goes wrong. We scope to your reality — what your authorizer expects in your renewal year, and what your operations director can actually own day-to-day.

Almost everything non-emergency goes in the summer window or over winter break. We plan twelve months out: discovery and design in spring, the heavy lift in summer (Wi-Fi refresh, switch upgrades, SIS cutover, identity consolidation), stabilization in fall. Emergencies and security incidents get scheduled around testing windows, after-school hours, and weekends. We will not push a Wi-Fi cutover the week before FSA testing.

Network-edge filtering (Securly, GoGuardian, Lightspeed Systems, iBoss — all E-Rate Category 2 eligible) layered with on-device filtering for Chromebooks and iPads so the policy follows the student home. We block by category (pornography, gambling, self-harm, gaming, social media), by bypass class (VPN browser extensions, unsanctioned generative-AI tools that train on student input), and by schedule (locked-down testing mode during state assessments, looser during electives). The part most districts miss is the evidence side: audit-ready logs showing what was blocked, when, and for which device — so when E-Rate, your authorizer, or a parent asks for proof, you have it.