governance risk and compliance

Acolyst is an SBA-recognized woman-owned small business (WOSB) disadvantaged (SDB & EDWOSB) government consulting firm specializing in Enterprise Data Strategy, Business Performance Analytics, and Workforce Communication Transformation. Founded over 25 years ago, it provides data management and business performance consulting to government, commercial, and non-profit industries, blending neuroscience, organizational psychology, and cognitive behavioral techniques.

business intelligencebusiness performance consultingData Analyticsdata consolidationdata managementData Migrationdocumentationorganizational change managementproject and portfolio managementrisk assessmentstrategy planning and mappingworkforce communication

Akumen, Inc. is an IT services and consulting firm dedicated to empowering federal agencies with innovative IT solutions that strengthen public safety and national security. It is an 8(a) Certified Small Disadvantaged Business (SDB) and a participant in the SBA's Mentor-Protégé Program, offering services including DevSecOps, cloud, data analytics, cybersecurity, emerging technologies, and digital platforms.

AICI/CD securityCloud migrationcloud securityCybersecuritydata integrationData Sciencedata visualizationDevSecOpsmachine learningsecure coding trainingthreat modeling

American PCS is a managed IT services provider in Council Bluffs, IA and Omaha, NE, specializing in IT and cybersecurity services for nonprofits, mid-sized, and large businesses. Its mission is to support organizations with reliable solutions, exceptional service, and a human-centered approach.

24/7 IT monitoring and alertingco-managed ITCybersecurityManaged It Servicesnetwork supportpenetration testingRemote and onsite IT supportUpdate and patch management

Anthony and Associates, Inc. (AAI) is a CVE verified Service-Disabled Veteran, Economically Disadvantaged Woman Owned Small Business providing professional services including systems engineering and software development, medical and technical staffing, program and project management, supply chain management, information technology and cyber security, governance, risk and compliance, and financial and acquisition management. AAI serves federal, state, and local government agencies as well as healthcare organizations.

configuration managementfinancial and acquisition managementinformation technology and cyber securityManaged It Servicesmedical and technical staffingprogram and project managementquality assurancesoftware developmentSupply Chain ManagementSystems Engineering

ARC2O is a Woman Owned Small Business that delivers Cyber Security services designed to strengthen customers' security posture. Its team of experienced Cyber Security professionals works closely with clients to understand their unique needs and provide tailored solutions, helping clients align cyber security with their business needs and create a winning business strategy.

cloud cybersecurity solutionsCyber Security Consultingon-premise cybersecurity solutions

Assura is a cybersecurity company providing cybersecurity consulting services, managed security services, and cyber risk assessments. It protects, monitors, responds, and defends 24/7/365, helps organizations pass regulatory audits, and delivers cybersecurity to companies and organizations of all sizes. Its AuditArmor® Audit Defense Guarantee backs its compliance work.

audit defenseCyber risk assessmentsCybersecurity consultingmanaged security servicespenetration testingsecurity awareness trainingsecurity monitoring and responsevulnerability management

AxxessPros is a women-owned technology and business consulting firm based in Houston, Texas, offering cybersecurity, AI governance and program delivery for organizations that need senior expertise without a full-time hire. Its services include vCISO services, CMMC readiness, risk management and AI governance frameworks.

agile-based program deliverycloud security assessments and auditscyber readiness assessmentlearning and developmentMarket Researchorganizational change managementpenetration testingprocess improvementprogram governancerisk remediationsecurity implementation and designStrategic planning and analysis

Catenaccio Solutions is a cybersecurity advisory firm based in Loganville, GA, delivering senior-level advisory to federal agencies, defense contractors, and private sector organizations. Every engagement is principal-led by founder Michael Lovett, a CISSP-certified professional with Big 4 consulting, federal program management, and U.S. military network operations experience. The firm is registered on SAM and certified as a Service-Disabled Veteran-Owned Small Business and Minority-Owned Business.

CMMC readinesscybersecurity advisoryGap assessmentsremediation planningSSP developmentvirtual CISO

Centeva is an innovative provider of powerful and dynamic professional and technical services to drive modernization and success for clients, with a focus on service excellence for the evolving federal landscape. It offers Agile, tailored custom software development, AI/ML expertise, full-spectrum information security, software system administration, and system sustainment/maintenance for Federal and commercial customers.

agile software developmentATO & CertificationsCognitive Computingcomputer visionContingency planningdeep learningDevOpsDevSecOpsidentity and access managementincident managementmachine learningnatural language processingneural networksoperations and maintenancesecurity architectureSpeechSystem AdministrationThreat and Vulnerability Managementzero trust

C2I Technologies, LLC is a certified Service Disabled Veteran Owned Small Business (SDVOSB) Information Technology service provider established in 2016. It provides IT systems integration, engineering IT solutions, application/database support, and RMF-compliant solutions, with over 20 years of experience working for various DoD Agencies.

Assessment & AuthorizationCyber securityearned value managementFISMA complianceinformation assuranceIT EngineeringIT systems integrationNIST RMFprogram and project managementRMF compliancesystems modernizationvirtualization

CyberCX is a cyber security and cloud company that partners with enterprise and government organizations to defend against cyber threats and embrace cloud opportunities. It has more than 1,300 cyber security and cloud professionals, 9 advanced security operations centers globally, and incident responders handling over 250 cyber breaches per year.

cloud securityCyber Threat and Risk Assessmentdigital forensics and incident responseEducation and trainingidentity and access managementmanaged security servicesNetwork and Infrastructure Solutionspenetration testingSecurity Operations Centre (SOC)Security Testing and AssuranceStrategy and consultingvulnerability assessments

Cyberflawed is a cybersecurity, information security, and privacy consulting firm based in Holland, Michigan, serving Grand Rapids and West Michigan. It helps public companies, private businesses, and nonprofits strengthen security and compliance programs, specializing in governance, risk management, and compliance (GRC) across cybersecurity, privacy, and regulatory frameworks, covering both traditional IT and ICS/OT environments.

AI governanceauditsCybersecurity consultingdata governanceEnterprise Risk AssessmentsIT strategyOT convergenceprivacy consultingRegulatory Complianceresiliency strategiessupply chain risk management

Cytellix provides a unified AI platform combining governance, risk and compliance (GRC) with managed detection and response (MDR/XDR). Its Cytellix Cyber Watch Platform (CCWP) is a SaaS platform that correlates compliance, risk management, managed detection and response, and trusted expertise. Over 150 companies trust Cytellix for their own company and supply-chain cybersecurity.

AI/MLAPI integrationcloud securitymanaged detection and responsesecurity operations centerticketing systems (ITSM)zero trust architecture

Element is an AI and digital transformation company that delivers IT solutions to enterprises. It provides services spanning AI, GenAI, data engineering, cloud services, automation, application modernization, and digital transformation, and offers products such as Intelligent Document Processing, Talent Enhancement Partnership, and Financial Dashboards. The company serves industries including manufacturing, banking, insurance, life sciences, healthcare, retail/CPG, and logistics, with offices in New Jersey USA, Bangalore India, and Sydney Australia.

Agentic AIApplication Modernization / DevOpsArtificial Intelligencecloud servicesCyber Security Maturity and Risk Assessmentdata and analyticsgenerative AIhyper-automationintelligent document processingManaged ServicesServiceNow implementation and support

FedShark (legal name MJI Enterprises LLC, dba FedShark) helps federal agencies and public organizations secure the operational technology behind critical infrastructure such as water, power, transportation, and the defense mission. Founded by three veterans, it is an SBA certified SDVOSB and a proud sponsor of ICS Village.

asset visibility and segmentationContinuity planningdigital twin assessmentshardeningOT cyber rangesOT incident responseOT vulnerability assessmentsSecurity Operations (SOC)workforce training

Fusion Advanced Technology, LLC is a cybersecurity and IT services company based in Laurel, Maryland, founded by Gloria Fenwick. It provides cybersecurity services including security assessment and authorization, security testing and auditing, risk assessment and management, security architecture design, incident response, vulnerability management, governance risk and compliance, endpoint security, cloud security, encryption, and program and project management. The company serves the Department of Defense, the Intelligence Community, and state and local

cloud securityCybersecurity Advisory and ServicesCybersecurity Program & Project ManagementEncryption and Data Protectionendpoint securityIncident response and managementnetwork and system administrationrisk assessment and managementsecurity architecture designSecurity Assessment and Authorization (A&A)Security Testing and Auditingvulnerability management

G1VE Technologies is a Service-Disabled Veteran-Owned Small Business that combines capital strategic advisory with its proprietary Advanced Funding Intelligence System (AFIS) platform. It helps mission-driven organizations monitor legislative and policy signals, predict funding windows, and build proactive funding strategies, and also provides technology advisory, custom software development, and cybersecurity & GRC services.

API integration and automationCloud architecture and migrationcustom software developmentCybersecurity and data privacyDigital transformationfractional leadershipLegislative and policy monitoringNIST RMF / CMMC readinessPredictive funding forecastingrisk assessmentsTechnology strategy and roadmapZero Trust frameworks

GlassHouse Systems (GHS) designs, deploys, manages and secures enterprise IT infrastructure on-premises or in the Cloud. With over 33 years of experience, GHS provides cloud, managed services, cybersecurity, and infrastructure solutions, and is a Platinum IBM Business Partner and a large IBM Cloud provider in North America.

Backup and recoveryCloud migrationcloud operationsdisaster recoveryhigh-performance computingIBM i/AIX managementIncident responsemanaged detection and responsenetwork design and implementationRemote Infrastructure Managementsecurity operationsSIEM migration

Intelligent Data Inc. (IDI) is a minority-owned cybersecurity professional services company delivering AI-driven cybersecurity solutions. It offers Cybersecurity as a Service (CSaaS) through its OmniaSec platform, along with consulting, security testing, governance, risk and compliance, DevSecOps, and cybersecurity engineering for federal, state and local, commercial, finance, education, healthcare, and government clients.

AI-driven cybersecuritycybersecurity engineeringDevSecOpsIncident responsepenetration testingRed Team Responsesecurity testingthreat intelligencevulnerability management