Key Takeaways

  • SysGroup secured two three-year contracts worth more than £1 million in total.
  • Rubrik’s technology will underpin managed data protection, cyber resilience, and recovery services.
  • The agreements provide early commercial validation for SysGroup’s MSP PayGo partnership with Rubrik.

SysGroup plc has secured two three-year cyber resilience contracts with a combined value of more than £1 million, giving its recently established Rubrik partnership an early commercial test. The customers are a UK housing association and an English further education provider, both operating in public and community-facing environments where prolonged disruption can have immediate consequences.

Under the agreements, SysGroup will deliver managed data protection, cyber resilience, and recovery services using Rubrik’s technology platform. The focus extends beyond conventional backup. SysGroup and Rubrik are positioning the service around ransomware preparedness, protected data, and the ability to recover operations after an incident.

That distinction matters. A backup may exist, but can it be trusted and restored quickly when production systems are unavailable? Cyber resilience programmes increasingly address that broader question, combining recovery technology with operational processes, monitoring, and specialist support.

The contracts also mark the first customer wins disclosed through SysGroup’s participation in the Rubrik MSP PayGo programme. SysGroup is the first UK and Ireland managed service provider to join the programme, which gives SysGroup a flexible commercial structure for offering Rubrik capabilities as a managed service. Customers can consequently access the technology without taking on the upfront expenditure, internal capacity commitments, and operational burden commonly associated with enterprise deployments.

Consumption-based delivery does more than change billing; it makes sophisticated recovery capabilities accessible to mid-market and public-service organizations that may have limited cybersecurity teams. It also places more responsibility on SysGroup to manage the underlying environment, service quality, and recovery readiness over the full contract term.

The timing aligns with regulatory shifts for SysGroup. The UK’s proposed Cyber Security and Resilience Bill is intended to broaden the scope of the NIS Regulations, including coverage of managed service providers and additional organizations supporting public and critical services. That direction raises expectations not only for technology controls but also for governance, incident response, and supply-chain oversight.

Public-sector assurance is becoming more standardized too. The National Cyber Security Centre last updated its Cyber Assessment Framework in April 2024, and the framework is now used by nearly all UK cyber regulators as well as through GovAssure. For housing and education customers, a managed recovery service can help produce clearer operational evidence around data protection, resilience planning, and restoration processes.

Supply-chain scrutiny will remain part of the picture. NIST SP 800-161, published in 2022, sets out practices for managing cybersecurity risk across technology supply chains. Although it is a US standard, the UK government has referenced alignment with its principles when discussing future resilience baselines. Managed providers such as SysGroup therefore face pressure to demonstrate how vendors, platforms, and service processes are governed together.

For SysGroup, the immediate attraction is recurring revenue. Three-year agreements provide better visibility than one-off implementation work, while the PayGo structure offers a route to scale without forcing every customer into the same capacity model. The contracts also support SysGroup’s MSP 3.0 and AI strategy by adding cyber resilience data and operational signals that could inform more proactive and automated service delivery.

The executive chairman of SysGroup plc described the wins as evidence that the Rubrik relationship is “already translating into customer demand, recurring revenue and a stronger competitive position for SysGroup.” Furthermore, the AVP of global MSP sales at Rubrik said the companies aim to improve data security and ransomware preparedness through a flexible, consumption-based service.

Two contracts do not establish the full scale of the opportunity. Still, they move the SysGroup and Rubrik relationship beyond a partnership announcement and into contracted delivery. The next measure will be whether SysGroup can repeat the model across other regulated and mid-market customers while maintaining recovery performance, commercial flexibility, and customer confidence.