tabletop exercises

Concentric is a security and intelligence firm whose in-house team of security and intelligence professionals provides global protective services for high-net-worth families and corporations. Its team is drawn from military, government, and intelligence backgrounds, and it offers customized strategies to protect people at home, during travel, and online.

background investigationsExecutive protectiongeolocation trackingGSOC monitoringintelligence analysispre-employment vettingresidential securityrisk assessmentssecure drivingsecurity program reviewsspecial event securitytrainingTSCM

Cover6 Solutions is a service-disabled veteran-owned and minority-owned cybersecurity firm founded in 2013 by Tyrone E. Wilson, an Army cyber veteran with more than 30 years in information security. It provides cybersecurity services for organizations and hands-on training for people building cybersecurity careers, with every engagement founder-led.

AI security governanceCMMC consultingcybersecurity trainingmanaged detection & responseNIST 800-171 readinessOSINT & reputation intelligencepenetration testingstaffing & recruitingvirtual CISO leadershipVulnerability assessment

Crisis Response Leader Training (CRLT), Inc. is an Indiana-based small business that equips emergency and crisis response leaders with hyper-realistic software simulations. Its flagship product, The Incident, integrates planning, execution, and assessment into a single platform for end-to-end training across all phases of emergency response, focusing on Consequence Management. CRLT serves education, public safety, government, and corporate sectors, and is a member of the Active Shooter Prevention Project (ASPP) Community of Experts.

3D scenario developmentcrisis response trainingemergency management consultingsimulation software

CRISISTEC is an all-hazards preparedness partner delivering practical training, realistic exercises, and expert consulting that help organizations reduce risk, strengthen readiness, respond decisively, and recover effectively from real-world incidents. It serves emergency services, emergency management, public safety, healthcare, government, and community partners.

after-action reportingconsultingContinuity planningevaluationfacilitationfull-scale exercisesfunctional exercisesHSEEP-aligned exercise design and developmentimprovement planningincident managementPlanningpolicy developmenttraining

Critical Start provides managed detection and response (MDR) services with 24x7x365 monitoring, investigation, and response from a US-based SOC. Founded in 2012 by three security experts, the company combines AI-accelerated triage with human-led investigation and backs response times with contractual SLAs. Its CORR platform provides full transparency into every alert, investigation, and response.

24/7/365 monitoringAI-accelerated triagedigital forensicshuman-led investigationIncident responsemanaged detection and responseMicrosoft Security deploymentpenetration testingSIEM managementthreat detectionvulnerability management

Critical Talent Development & Consulting LLC, established in 2023 and based in West Palm Beach, Florida, provides consulting, training, and organizational development services focused on strengthening institutional preparedness for natural and man-made disruptions and crises. It engages a global network of experienced practitioners to deliver tailored consulting and training programs to organizations of all sizes.

command center designconsultingContinuity of Operations Planningevacuation planningorganizational developmentrisk managementsimulationstraining

CYBER CIC assists proactive leaders in making informed, risk-based decisions to protect their organizations. They work directly with business owners, IT partners and insurance providers, and also help reactive leaders make crisis decisions. Their specialties include strategic advisors/fractional CISOs, cyber risk assessments, business-specific cybersecurity training, and policy, plans, and process reviews.

business intelligencecomputer and cell phone forensicsCyber risk assessmentscybersecurity trainingfractional CISO servicespenetration testingpolicy and process reviewsRed Teamingreputation assurancevulnerability assessments

Cyber Point Advisory provides cybersecurity consulting and advisory services to organizations across the United States, led by founder and CEO Catharina "Dd" Budiharto, a former CISO with more than 30 years in cybersecurity. Services include CISO as a Service, security assessments, security program development, and compliance support. The company is located in Houston, Texas.

Board and executive reportingCISO leadershipcomplianceincident readinesspolicy and procedure developmentsecurity architecturesecurity assessmentssecurity strategy and governancevendor security assessmentsvulnerability assessments

CyberProtex is a Huntsville, Alabama-based cybersecurity company founded in 2012 that serves defense contractors, businesses, and government agencies. It provides CMMC and NIST SP 800-171 compliance, managed security operations with a 24/7 U.S.-based SOC, Microsoft 365 GCC High and Azure security, penetration testing, incident response, and certification training.

automationcertification trainingCloud migrationIncident responsemanaged security operationspenetration testingRMF/eMASS supportSOC monitoringtenant hardeningvulnerability assessments

Cyberspace Knowledge Group LLC (CKG) is a Norton, Massachusetts-based cybersecurity firm specializing in designing and facilitating tabletop exercises (TTX), hands-on simulations, and cyber readiness training programs. Built on military cyber operations experience, CKG offers strategic advisory support and training through asynchronous modules or live-facilitated engagements. CKG is registered in SAM as a Service-Disabled Veteran-Owned Small Business (SDVOSB) and is a Massachusetts Small Business certified as a Veteran Business Enterprise (VBE) and Portu

cyber incident response trainingcyber readiness traininghands-on simulationsmulti-agency cyber exercisesstrategic advisory support

Cyflare delivers SOC, MDR stack, and compliance evidence so service providers can scale cybersecurity across clients. It provides 24/7 detection and response across cloud, endpoint, identity, email, and network through its Cyflare ONE platform and SOC, serving MSPs, resellers, SMBs, and enterprises.

24/7 SOC monitoringalert triageautomated patchingcompliance readinessescalation and responseincident response planningpenetration testingvirtual patchingvulnerability scanning

Decision Point Security performs cybersecurity Independent Verification and Validation (IV&V) Test and Evaluation (T&E), and risk assessments. The company specializes in ensuring cybersecurity systems and processes function securely and comply with industry standards and regulations, providing independent, objective assessments to U.S. Government agencies, commercial businesses, and public services. It was founded by David Davis and Casey Cook, a team of experienced cybersecurity professionals.

Incidence response planningIndependent Verification and Validation (IV&V)penetration testingRisk AnalysisSecurity audits and compliance assessmentsTest and Evaluation (T&E)threat modelingVulnerability assessment

Digital 360 Secure is a Service-Disabled Veteran-Owned Business located in Brookville, PA, providing Virtual Chief Information Security Officer (vCISO) services. It helps organizations build, manage, and mature security programs using frameworks such as NIST CSF 2.0, NIST 800-53, CJIS Security Policy, ISO standards, and PCI, backed by more than 30 years of cybersecurity and IT leadership experience.

compliance alignment (NIST CSF 2.0, NIST 800-53, CJIS, HIPAA, PCI, ISO)incident response planningIT vendor oversightpolicy creation and governancerisk management and mitigation planningsecurity awareness and trainingthird-party risk managementvCISO leadershipvulnerability management tracking

Disaster Demons Emergency Management Group is a small, employee-owned emergency management consulting company established in 2004. It designs and manages emergency preparedness exercises and writes, reviews, edits, and revises emergency preparedness plans, procedures, and guidelines.

emergency preparedness exercise designexercise managementfull-scale exercisesfunctional exercisesplan editingplan reviewplan revisionplan writingseminarsworkshops

Doberman Emergency Management Group LLC is a Women-Owned Small Business headquartered in St. Louis, MO, USA, founded in 2017, working with clients worldwide. It helps organizations strengthen readiness through emergency planning, risk assessments, mitigation, training, exercises, and situational awareness, protecting life, property, and continuity of operations.

active shooter response trainingcounterterrorism trainingcrisis communication trainingCrowd Managementde-escalation techniquesemergency operations planningEvacuation exercisesevent security site assessmentsfull-scale simulationsfunctional drillsmitigation strategy developmentStop the Bleed certificationthreat and vulnerability assessments

DragonLady Defense, LLC provides business continuity/COOP planning, training, and disaster management consulting services across military, federal, state, county, and city levels. Founded and led by Bobbie Jackson, who has over 30 years of leadership in military and emergency management, the company offers risk assessments, continuity plans, ICS/FEMA/DSCA training, HAZMAT courses, and exercise development and execution.

business continuity planningbusiness impact analysisCOOP Strategy Developmentemergency management consultingExercise Development and Executionfull-scale exercisesfunctional exercisesHazMat trainingICS/FEMA/DSCA Trainingrisk assessment

Dragos provides industrial cybersecurity solutions for operational technology (xOT) environments, safeguarding critical infrastructure from those trying to disrupt it. Its offerings include the Dragos Platform for asset visibility, network monitoring, vulnerability and exposure management, threat detection and response, and AI acceleration via Dragos EmberAI, along with OT cyber threat intelligence and professional services.

Incident responsemanaged security monitoringOT cybersecuritypenetration testingpurple team exercisesred team servicesthreat detectionthreat intelligenceVulnerability assessment

Echelon Risk + Cyber is an award-winning risk and cybersecurity consulting firm providing vCISO and MSSP leadership for mid-market organizations, aligned with compliance across regulated industries. The firm offers managed security services, offensive security and adversary simulation, defensive security and hardening, risk advisory and GRC, and AI risk and security, serving industries including financial services, higher education, healthcare, technology and SaaS, and the Defense Industrial Base.

AI governanceBusiness continuity and disaster recoveryCompliance Readiness AssessmentsCybersecurity awareness trainingGRCincident response planningmanaged security servicespenetration testingpurple teamingRed Teamingrisk assessmentsSecurity Team as a Servicethreat huntingvCISOvulnerability management

Enterprise Cyber Solutions is dedicated to applying the principles of pragmatic cybersecurity to help clients address challenges in cyber strategy, architecture, and regulatory compliance, at scales ranging from small startup companies up to regulated multinationals. Its team of advisors possess more than 60 years of combined experience in national security and critical infrastructure, including defense contracting, cyber consulting, and advanced engineering.

CMMC compliancecyber strategyIncident responsepolicy developmentRegulatory Compliancesecurity architecturesecurity assessmentsvCISO servicesvulnerability management

Essendis is a cybersecurity and cloud solutions firm serving defense contractors and regulated organizations. Its advisors (former Big Four auditors) and cloud engineers help clients meet CMMC 2.0, NIST 800-171, HIPAA, and SOC 2 requirements and build cloud environments that pass audits. Essendis is a Microsoft Government Cloud reseller and AOS-G partner.

Cloud EngineeringCMMC compliancegap analysisIncident responsemanaged security servicespenetration testingremediationsecure enclave designvCISO

Fiddlers is a security consulting fellowship of seasoned cybersecurity professionals. It provides proactive cybersecurity, product security, and Governance, Risk, and Compliance (GRC) services, guiding organizations through digital security challenges with fractional leadership, risk engineering, and incident response support.

AI securitybreach simulationscloud securitygovernance framework design and auditingincident response planningsecure code reviewsecurity program engineeringthreat modeling

Fire Mountain Labs is an AI security and governance consulting firm based in San Diego, CA, and a Service-Disabled Veteran-Owned Small Business. It helps organizations deploy AI that survives attackers, auditors, and regulators through AI red teaming, risk assessment, ISO/IEC 42001 audit, governance, and training. Its founders are PECB-certified ISO/IEC 42001 Lead Auditors.

AI governanceAI incident responseAI lifecycle engineeringAI red teamingAI risk assessmentinternal auditISO/IEC 42001 auditsecure design reviewtraining and workshops

Fireside partners with organizations facing complex, high-consequence challenges through expert emergency preparedness, crisis response, and resilience planning. It helps leaders navigate uncertainty, make informed decisions under pressure, and safeguard people, operations, and reputation, collaborating directly with leadership teams to bring structure, confidence, and calm to critical moments.

air ambulance coordinationaviation investigative consultationcrew resource managementcrisis communications trainingcrisis responseemergency preparednessexecutive advisoryfull scale drillshazardous event monitoringhumanitarian coordinationpersonal effects managementrepatriation of remainsResilience planning

Florida Resilience Group LLC is a disabled veteran owned resilience consulting firm based in Tampa, Florida that serves businesses and organizations across the nation. It helps federal, state, and local governments, critical infrastructure partners, healthcare systems, and private sector organizations build crisis management capabilities and resilience governance frameworks. Its founder has 30+ years of experience in building operational and organizational resilience.

Continuity planningcrisis governancecrisis managementexecutive trainingresilience consultingrisk assessment