Alexandria, City of Alexandria, Virginia
Security program leadership for Alexandria defense and federal contractors
We help Alexandria defense contractors and federal services firms with CMMC Level 2, NIST SP 800-171, incident response and insider threat programs. Alexandria is about 40 miles from Leesburg. We work on site anywhere in the Washington DC area, and much of the program work runs remotely between visits.
CMMC Level 2, NIST SP 800-171, incident response and insider threat programs for Alexandria, VA contractors, from Leesburg, about 40 miles away.
Book a 30 minute callWhy does Alexandria need this work?
- Alexandria sits between the Pentagon and Fort Belvoir, with Marine Corps Base Quantico further south on I-95, and its business districts hold many contractors supporting programs at all three.
- Federal services firms here often hold DFARS 252.204-7012 and need an incident response plan that meets the 72 hour reporting requirement, tested before it is needed.
- Contractors working with sensitive programs increasingly see insider threat awareness and user activity monitoring requirements in their contracts.
- Alexandria is at the far end of our usual drive, so we plan on site days carefully and handle routine program work remotely.
Which engagements do Alexandria contractors use?
Incident response and tabletop exercises
Incident response planning and tabletop exercises for defense contractors, including DFARS 252.204-7012 reporting readiness.
Insider threat and enterprise audit
Insider threat, enterprise audit and user activity monitoring program design for federal programs and defense contractors.
CMMC Level 2 program leadership
Fractional CISO leadership for a CMMC Level 2 certification run, from the first assessment to the C3PAO visit.
No consultant can promise the outcome of an assessment or authorization. The assessor or authorizing official decides it.
What do Alexandria contractors ask?
Are you based in Alexandria?
No. We are based in Leesburg, about 40 miles from Alexandria. We come to Alexandria on site when the work needs it.
What does DFARS 7012 require when there is an incident?
It requires reporting a cyber incident affecting covered defense information to DoD within 72 hours of discovery, and preserving images and relevant data for DoD to review.
Can you run a tabletop exercise for our leadership?
Yes. We design scenarios around your contracts and data, run the exercise and give you a written record of what worked and what to fix.
Where else nearby do we work?
Cybersecurity consulting in Arlington, VA, Cybersecurity consulting in Fairfax, VA, Cybersecurity consulting in Manassas, VA. See all the places we work.
Ready to talk it through?
BOOK A CALLPick a time for a 30 minute call with the practice.
What happens in 30 minutes
- We learn about your company, the contracts you hold or are bidding on, and what is driving your timeline.
- We talk through where you stand and which engagement fits, if any does.
- If there is a fit, we follow up with a written scope. No slides.