CMMC · NIST SP 800-171 · ITAR · RMF · Insider threat+1 571 410 3066
Cybersecurity Consulting

Fairfax, Fairfax County, Virginia

CMMC and fractional CISO support for Fairfax defense contractors

We provide fractional CISO leadership and CMMC Level 2 program work for Fairfax defense contractors, federal integrators and research organizations. Fairfax is about 28 miles from Leesburg. We work on site anywhere in the Washington DC area, and much of the program work runs remotely between visits.

Based in Leesburg, VA · On site across the DC area

Fractional CISO leadership and CMMC Level 2 programs for Fairfax, VA defense contractors and integrators, from Leesburg, about 28 miles away.

Book a 30 minute call

Why does Fairfax need this work?

  • Fairfax and the surrounding Fair Lakes, Fairfax Center and Merrifield areas host a wide range of government services firms, from small specialist subcontractors to large integrators.
  • A major public research university in Fairfax brings DoD sponsored research into the area, along with the question of how CUI is handled in an academic setting.
  • Small Fairfax contractors often hold DFARS 252.204-7012 through a prime without having a security leader, so the SPRS score and the annual affirmation can end up resting on guesswork.
  • I-66 and Route 50 connect Fairfax to the rest of the region, and we schedule on site work around the traffic rather than against it.

Which engagements do Fairfax contractors use?

vCISO and security program leadership

Virtual CISO and security program leadership for defense contractors and federal integrators, including supplier cyber readiness.

CMMC Level 2 program leadership

Fractional CISO leadership for a CMMC Level 2 certification run, from the first assessment to the C3PAO visit.

SSP and POA&M review and assessor readiness

Review of your System Security Plan and POA&M against NIST SP 800-171A, so both documents are assessor ready for CMMC Level 2.

No consultant can promise the outcome of an assessment or authorization. The assessor or authorizing official decides it.

What do Fairfax contractors ask?

Are you based in Fairfax?

No. We are based in Leesburg, about 28 miles from Fairfax. We travel to Fairfax clients for on site work.

Who signs the CMMC affirmation in a small company?

A senior official with authority to make the representation, called the Affirming Official. That person should see the SSP and the evidence before signing.

Do you work with university research groups?

Yes, where DoD sponsored work brings CUI or export controlled data into a lab. Scoping in an academic environment needs particular care, and we plan for it.

Where else nearby do we work?

Cybersecurity consulting in Chantilly, VA, Cybersecurity consulting in Reston, VA, Cybersecurity consulting in Arlington, VA, Cybersecurity consulting in Manassas, VA. See all the places we work.

Ready to talk it through?

BOOK A CALL

Pick a time for a 30 minute call with the practice.

What happens in 30 minutes

  1. We learn about your company, the contracts you hold or are bidding on, and what is driving your timeline.
  2. We talk through where you stand and which engagement fits, if any does.
  3. If there is a fit, we follow up with a written scope. No slides.