Frequently Asked Questions

Alcala Consulting is a Los Angeles-based IT services company that provides managed IT services, cybersecurity, AI automation, and CMMC compliance solutions. We help small to medium businesses in LA, Pasadena, and surrounding areas with their technology needs, from basic IT support to advanced cybersecurity programs.

We serve the greater Los Angeles area including Pasadena, Burbank, Glendale, Arcadia, Monrovia, Alhambra, El Monte, San Gabriel, Redondo Beach, Marina del Rey, and many other LA County cities. Our technicians are local to the area and provide both remote and onsite support.

Alcala Consulting has been serving Los Angeles businesses for over 28 years. We have extensive experience in IT services, cybersecurity, and compliance, making us one of the most established IT companies in the LA area.

You can reach us by phone at 626-449-5549. For support, call 800-235-3574. You can also email us or schedule a consultation through our website. We offer 24/7 support for our managed service clients.

Our managed IT services typically cost between $167 to $250 per user per month. For example, a 10-person company would pay $1,670 to $2,500 per month. This includes 24/7 monitoring, help desk support, security protection, and proactive maintenance. We offer flexible plans to fit different business needs and budgets.

Our managed IT services include 24/7 network monitoring, help desk support, security updates, backup management, antivirus protection, email support, software updates, and proactive maintenance. We also provide onsite support when needed and strategic IT consulting to help your business grow.

We offer flexible contract options. While we prefer longer-term relationships for better service delivery, we understand that businesses have different needs. We can work with month-to-month arrangements or longer-term contracts depending on your requirements.

For managed service clients, we typically respond to critical issues within 1 hour and non-critical issues within 4 hours during business hours. We provide 24/7 monitoring and can often resolve issues before you even know they exist. Emergency support is available around the clock.

Yes, we provide both remote and onsite support. Most issues can be resolved remotely through secure remote access tools. When onsite support is needed, our local technicians can visit your office. We use industry-standard remote support tools that are secure and efficient.

Yes, we provide comprehensive cloud services including migration planning, implementation, and ongoing management. We work with Microsoft Azure, AWS, Google Cloud, and other platforms. We help businesses move to the cloud safely and efficiently while maintaining security and compliance.

We provide comprehensive backup solutions including local backups, cloud backups, and hybrid approaches. Our disaster recovery services ensure your business can quickly resume operations after an incident. We test backups regularly and provide detailed recovery procedures.

Yes, we offer AI-enabled VoIP services that include advanced call management, collaboration tools, and cost-effective solutions. Our VoIP systems integrate with your existing IT infrastructure and provide features like call recording, voicemail transcription, and CRM integration.

We provide comprehensive cybersecurity services including threat protection, security audits, compliance support, data backup, network security, endpoint protection, security awareness training, and incident response. We help businesses protect against ransomware, phishing, and other cyber threats.

Yes, we conduct thorough security audits to assess your current security posture, identify vulnerabilities, and recommend improvements. Our audits include network security, endpoint security, user access controls, and compliance requirements. We provide detailed reports with actionable recommendations.

We align cybersecurity programs with NIST 800-171, NIST 800-172, CMMC, ISO 27001, and PCI DSS. We help businesses implement controls, document evidence, and prepare for assessments through proper security practices, documentation, and ongoing monitoring.

We implement multiple layers of ransomware protection including advanced endpoint protection, email security, network monitoring, regular backups, user training, and incident response planning. We also provide ransomware recovery services and help businesses develop prevention strategies.

We typically bill monthly for managed services, with invoices sent at the beginning of each month. We accept various payment methods including credit cards, ACH transfers, and checks. We can also arrange quarterly or annual billing for larger contracts.

Our managed service pricing includes most standard services. Additional costs may apply for specialized projects, hardware purchases, software licensing, or custom development work. We always discuss any additional costs upfront and get approval before proceeding.

We understand that business needs change. We work with clients to ensure smooth transitions, whether you're switching providers or changing your IT approach. We provide proper documentation and knowledge transfer to help with the transition.

Yes, we can source and provide hardware and software for your business needs. We work with trusted vendors to get competitive pricing and ensure compatibility with your systems. We also provide installation, configuration, and ongoing support for all equipment we sell.

CMMC (Cybersecurity Maturity Model Certification) is a cybersecurity certification program required by the Department of Defense for all contractors. If you work with DoD contracts or handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), you need CMMC certification to maintain your contracts.

Most businesses need CMMC Level 2 certification, which covers Controlled Unclassified Information (CUI). Level 1 is for Federal Contract Information (FCI) only. We can help you determine which level you need based on your contracts and the type of information you handle.

CMMC certification typically takes 6-12 months total: 3-6 months for implementation, 1-2 months for preparation, and 2-4 weeks for assessment. According to Federal Register guidelines, contractors have until January 1, 2027, to achieve full compliance, so it's important to start soon.

CMMC Level 2 certification typically costs $15,000-$25,000, including implementation costs, assessment fees, and ongoing compliance costs. The exact cost depends on your current security posture and system complexity. The ROI is usually 10x or more through maintaining DoD contracts.

Our CMMC process includes: 1) Initial assessment to identify gaps, 2) Comprehensive remediation to implement required controls, 3) Preparation for C3PAO assessment, 4) Final C3PAO certification. We guide you through each step and ensure you meet all requirements.

According to the September 10, 2025 Federal Register document: Level 1 compliance required by December 31, 2025; Level 2 compliance required by January 1, 2026 (with 12-month grace period); Full implementation required by January 1, 2027. No exceptions will be granted after these dates.