CMMC · NIST SP 800-171 · ITAR · RMF · Insider threat+1 571 410 3066
Cybersecurity Consulting

Manassas, Prince William County, Virginia

Security programs for Manassas defense manufacturers and suppliers

We help Manassas defense manufacturers, electronics suppliers and research organizations meet NIST SP 800-171, CMMC Level 2 and ITAR technical data requirements. Manassas is about 28 miles from Leesburg. We work on site anywhere in the Washington DC area, and much of the program work runs remotely between visits.

Based in Leesburg, VA · On site across the DC area

NIST SP 800-171, CMMC Level 2 and ITAR programs for Manassas, VA defense manufacturers and suppliers, from Leesburg, about 28 miles away.

Book a 30 minute call

Why does Manassas need this work?

  • Manassas has a long manufacturing base that includes defense electronics, systems integration and semiconductor fabrication, which means controlled technical data on engineering and production systems.
  • Innovation Park in Prince William County brings research, life sciences and data center campuses to the area, along with sponsored research that can carry DoD security obligations.
  • Marine Corps Base Quantico is in the same county, and suppliers supporting programs there often receive DFARS clauses through their primes.
  • Manufacturers here usually need shop floor equipment scoped as Specialized Assets, with segmented networks and documented procedures for how programs reach the machines.

Which engagements do Manassas contractors use?

ITAR cybersecurity program

Cybersecurity programs for ITAR controlled technical data, built on NIST SP 800-171 and DFARS 252.204-7012, from Capital Cyber.

CUI enclave design

CUI enclave design in Microsoft Azure and M365 GCC High, with a defined authorization boundary, for defense contractors.

SSP and POA&M review and assessor readiness

Review of your System Security Plan and POA&M against NIST SP 800-171A, so both documents are assessor ready for CMMC Level 2.

No consultant can promise the outcome of an assessment or authorization. The assessor or authorizing official decides it.

What do Manassas contractors ask?

Are you based in Manassas?

No. We are based in Leesburg, about 28 miles from Manassas. We work on site in Manassas whenever the engagement calls for it.

How do we handle machines that cannot be patched?

They are usually scoped as Specialized Assets, isolated on their own network segment, and documented in the SSP with the controls that contain the risk.

Do ITAR drawings change how our network is designed?

Yes. ITAR adds the question of who may access the data, so the enclave needs access rules that account for U.S. person status alongside the NIST SP 800-171 requirements.

Where else nearby do we work?

Cybersecurity consulting in Chantilly, VA, Cybersecurity consulting in Fairfax, VA, Cybersecurity consulting in Leesburg, VA, Cybersecurity consulting in Alexandria, VA. See all the places we work.

Ready to talk it through?

BOOK A CALL

Pick a time for a 30 minute call with the practice.

What happens in 30 minutes

  1. We learn about your company, the contracts you hold or are bidding on, and what is driving your timeline.
  2. We talk through where you stand and which engagement fits, if any does.
  3. If there is a fit, we follow up with a written scope. No slides.