Security Control Assessment

AMORRACK is incorporated in the USA and specializes in delivering quality consultancy services to local, national and international development clients, partners and agencies. It offers development program design, implementation, management, evaluation and learning, capacity building and training, systematic review, evidence gap mapping, and meta data analysis. It also provides information technology services including cybersecurity and infrastructure security consulting.

capacity building and trainingCollaborative Learning and Adapting (CLA)compliance assessmentDevelopment program designEvidence gap mappingFintech Logistics SupportMeta data analysisMonitoring, Evaluation, Research, and Learning (MERL)penetration testingProgram implementation and managementrisk assessmentsecurity awareness trainingSystematic reviewVulnerability assessment

ARDX is an employee-owned (ESOP) management and technology consulting firm founded in 2006 and based in Virginia. It provides management and technology consulting services to government agencies, small businesses, and nonprofit organizations, with a focus on healthcare policy, regulatory analysis, and program support. ARDX holds a CMMI Level 5 appraisal rating and ISO 9001:2015 certification.

Big Data analyticsBusiness continuity and disaster recoveryBusiness process managementExtract Transform Load (ETL)Independent Verification and Validation (IV&V)Learning management systems designPolicy development and implementationproject managementregulatory analysisstrategic-planningtechnology systems integrationTraining and outreach coordinationWeb-based training design and development

Briarcrest Solutions LLC is a service-disabled veteran-owned small business providing systems engineering, cybersecurity consulting, and assessment services to government and commercial organizations. The firm works across the system lifecycle, supporting design and integration, security program development, and independent assessments, and works as a prime or subcontractor.

audit readiness and evidence preparationCMMC readiness and gap analysisData engineeringincident response planningInterface Designmodernizationpenetration testingPipeline developmentrisk assessmentRisk Management Framework and ATO supportsecurity architecture and design reviewsecurity program developmentSystems EngineeringSystems Integrationtabletop exercisesthird party and supply chain reviewVulnerability assessment

Founded in 2017 by Michael Brown, BST is a small business specializing in cybersecurity solutions and services for sensitive government and commercial systems and networks. BST helps clients protect IT/OT infrastructure and comply with certification requirements for secure processing of unclassified information.

Agile and DevSecOpscontinuous monitoringcybersecurity engineeringsecurity assessmentSystems Engineeringvulnerability management

Compass Federal Consulting (CFC) is an information security firm founded in 2011 that serves federal government, higher education, healthcare IT, and private sector clients through risk-based security practices. It provides governance, risk and compliance, security operations, professional services, and cloud services.

cloud security architectureCMMCdata loss preventionFedRAMPFISMA complianceIncident responseISO 2700 Compliancepenetration testingPOA&M managementrisk assessmentSecDevOpsSecurity Documentation Designsecurity trainingvulnerability management

Cornelius Digital Solutions LLC (CDS) is a Colorado Springs, CO-based cybersecurity compliance consultancy serving defense contractors. Founded by Ben Cornelius, a Marine Corps veteran with CISSP, CISM, and CCSP certifications and active TS/SCI clearance, CDS provides CMMC Level 2 certification preparation, NIST 800-171 assessments, SSP and POA&M development, CUI enclave architecture, quarterly compliance reviews, and incident response planning.

ATO package developmentC3PAO audit supportCMMC Level 2 certification preparationcompliance program managementCUI enclave architectureincident response planningNIST 800-171 assessmentquarterly compliance reviewsRMF Assessment & Authorization supportSSP & POA&M developmentzero trust architecture advisory

First 15 Group is a joint venture combining technology and security solutions providers Cybervance and Everforth ECS Federal. The company defends enterprise information technology infrastructures, investigates digital crimes, and transforms organizations via training. It manages programs at scale and provides hands-on support with expert practitioners and instructors, with work performed worldwide.

breach responsebusiness analysisCyber InvestigationForensics and Malware AnalysisIncident responseinformation assuranceinsider-threatpenetration testingprogram managementSecurity EngineeringSOC AnalysisThreat HuntTraining & Workforce Development