Risk Management Framework (RMF)

Abacus Solutions Group is a veteran-owned small business supporting federal agencies with cybersecurity and risk management, IT service management, AI/machine learning implementation, security policy and compliance oversight, program management, and cleared talent staffing. It is a VA-certified Service-Disabled Veteran-Owned Small Business (SDVOSB), SAM registered, CVE certified, and registered under NAICS 541512 for Computer Systems Design Services.

AI/ML implementationcleared talent staffingCybersecurityIT service managementprogram managementsecurity policy and complianceService Desk Operations

Accountable Care Technologies is an SDVOSB-certified, TX HUB and MBE-certified partner with over 25 years of federal IT experience, specializing in federal healthcare technology. The company combines IT and financial management expertise to deliver mission-critical solutions for government healthcare systems, including electronic health records, operational medicine, and dental IT solutions. Based in San Antonio, TX.

agile methodologies (Scrum, Kanban)custom software developmentCybersecurityData Management and Analyticsdata visualization with Tableau and Power BIDevSecOpsfinancial analysis and risk managementprogram and project managementStrategic IT Consulting

Ailani Wind is an SBA mentor protégé agreement Joint Venture (JV) between Ailani Hawaiian Federal (AHF) and PingWind, Inc., providing Supply Chain and Risk Management, Digital Transformation and End-to-End Automation, Advance Threat Intelligence, and AI Driven Operations and Machine Learning. Ailani Hawaiian is a mature organization acting as a Prime Contractor, and PingWind is a CVE certified Service Disabled Veteran Owned Small Business (SDVOSB) combining cybersecurity, information technology, and supply chain services.

Advance Threat Intelligenceagile developmentAI Driven Operations and Machine Learningapplication rationalizationcloud securityCybersecurityDevSecOpsDigital Transformation and End-to-End AutomationHelp Desk and Service Desk SupportLegacy System Sustainment & Enhancementnetwork supportOperations & MaintenanceSupply Chain and Risk Management

Alaska Northstar Resources (ANR) is an SBA 8(a)-certified subsidiary of Shee Atiká, an Alaska Native Corporation, and a Small Disadvantaged Business. ANR delivers agile, secure IT solutions for government agencies, including cloud architecture, DevSecOps, cybersecurity, and enterprise IT services, serving clients such as the U.S. Air Force, Army, DISA, and USDA.

Agile SDLCapplication migrationApplication ServicesAssessment and Authorization (A&A)automated software testingcloud orchestration and automationCybersecurityDatabase development and migrationdata encryptionDevSecOpsEnterprise Cloud Servicesfirewall managementIDS/IPSnetwork hardeningnetwork servicesrouting and switchingsecurity automationSTIG compliancewireless network deployment

Almaville Corporation is a veteran-owned business with over twenty years of federal services, business-to-business (B2B) and Department of Defense (DoD) experience. It specializes in cybersecurity risk management assessments, consulting, and support services for facilities, and develops and deploys information technology solutions in challenging deployed environments.

Cybersecurity Strategy & IntelligenceIntelligence Data ManagementOrganization, Policy & Plan Developmentproject managementQuality Analysis & Data Managementrequirements analysisRisk Analysis & MitigationSystems EngineeringTeam Building & LeadershipTechnological and Engineering Services

Altus Technology Solutions is an ISO 9001:2015 Certified Information Technology and Engineering Consulting and Services firm for both commercial and government clients, founded in 2004. Its primary service areas include Engineering, Information Technology, and Range Operations and Maintenance. The company is located in Hanover, MD.

continuity of operations planning (COOP)Cyber securityengineeringInformation TechnologyInstrumentation maintenance and supportIT infrastructureLAN/WAN managementOrdnance supportprogram managementRange Operations & Maintenanceresearch, development, test & evaluationrisk and vulnerability assessmentssoftware developmentSystem Test and EvaluationVoIP Support

(407) 601-7148 The Key to Your Information Assurance AIT’s team of experts has extensive experience performing Cybersecurity for a variety of Government, Industry, and Academia. Risk Management Provides leadership with the tools and information to make informed decisions and risk-based decisions. Safe-Guard Your Business Are you doing enough to safeguard and protect your business and customer data? Vision To Transform Information Assurance and Software Engineering into Best-Value Solutions for the Federal Government, DOD, and Commercial Industry. Mission To Become the Premier Cybersecurity Organization by Providing Low-cost, Common Sense-Based Approaches to Achieving Information Assurance Compliance. Strategy To Provide Low-Cost, Low-Risk, Transparent Solutions while Providing Expert Technical Implementations and Strategy. About AIT Engineering At AIT Engineering, we provide consulting.

Boundary Defense Analysisbusiness continuityCross-Domain SolutionsCybersecuritydatabase engineeringDIACAP conversiondisaster recoveryinformation assurancepenetration testingSIEMsoftware developmentSystems Integrationvulnerability scanning

Azure Industries, Inc. was founded in 2007 and serves clients in the Orlando and broader Central Florida area. It offers Cyber Security, IT Project Management, and IT Managed Services, including support plans providing on site and remote IT support, cyber security compliance audits, and project management engagements.

backup solution design and implementationconference room design and installationCyber securityHIPAA, NIST, and PCI DSS complianceIT and cyber security trainingIT managed servicesIT project managementNext Generation Firewall migrationon-site and remote supportphysical to virtual server migrationsoftware licensing management

BNL Inc. is an SBA-certified Woman-Owned Small Business owned by Elizabeth C. Myers that provides critical support services for the Federal government, including HR, IT, Financial, and Program Management. The company has a 24+ year history collaborating with customers on classified mission-critical projects and serves agencies such as USPTO, Treasury, DoD, VA, HUD, Department of Education, DISA, and Architect of the Capitol. BNL was acquired in February 2021 by Elizabeth C. Myers and celebrated 20 years in business in May 2021.

AccountingCloud Migration & IntegrationCybersecurity/Information AssuranceData AnalyticsFinancial Auditing and Managementforensic analysisfraud protectionHealth IT and AI/ML data automationhuman capital managementProgram & Project ManagementRobotic Process Automation (RPA)

B Technology is a provider of IT services and cybersecurity solutions delivering mission-critical support to the Department of Defense, Intelligence, and Civilian Agencies across the Federal Government. It is a certified 8(a), Woman-Owned Small Business (WOSB) and Economically Disadvantaged WOSB (EDWOSB) firm by the SBA. The company delivers IT Service Management, cloud solutions, and secure network operations, and supported standing up the first Army Major Command in over 25 years.

Assessment & Authorization (A&A)Cloud migrationcontinuous monitoringDatabase Servicesdata center servicesdesktop supportendpoint protectionenterprise cyber analyticsnetwork servicesService DeskSystems supportVideo TeleconferencingVirtual Managementvulnerability testingWeb Design and Support

Columbia Technology Partners (CTP) advances the Department of Defense's technological edge with secure cloud modernization, Zero Trust cybersecurity, and tactical mobility solutions. CTP provides program and project management, mobile implementation and security, solutions architecture, Risk Management Framework compliance, cybersecurity, cross domain solutions, network and systems engineering, cloud architecture, software engineering, database engineering, and Multi-INT mission engineering for federal and enterprise clients.

Cloud architecture and infrastructureCross-Domain SolutionsCyber securitydatabase engineeringMission Engineering – Multi-INTMobile Implementation and SecurityNetwork and systems engineeringprogram and project managementsoftware engineeringSolutions Architecturezero trust

Computer World Services Corp. is a privately held information technology service provider for Defense and Civilian federal customers, founded in 1990 by Farrukh (Frank) Hameed. With over 30 years of experience, it delivers enterprise-wide IT solutions and services domestically and abroad, positioning itself as a Digital Transformation, Process Optimization, and Technological Innovation service provider for the federal market.

CybersecurityDigital transformationenterprise solutionsIdentity, Credential, and Access Management (ICAM)network operationsprocess optimizationproduct developmentprogram managementzero trust architecture

Canvas is a test, technology, and engineering company advancing innovation for the Department of War. Incorporated in September 2007 by founder Jami Peyton, Canvas provides test and evaluation, multi-disciplinary engineering, software, and data expertise across missile defense, hypersonics, AI and autonomy, cyber, digital engineering, and software and data solutions. Headquartered in Huntsville, Alabama, with a corporate office in Niceville, Florida opened in 2023.

AI and Machine LearningComputational Fluid Dynamics (CFD)Cybersecurity assessmentsdigital twinselectronic warfareEmbedded Softwareflight data analysisground testingHigh Performance Computing (HPC)hypersonics testingModel-Based Systems Engineering (MBSE)modeling and simulationpenetration testingsensor fusionsoftware developmenttelemetry and instrumentationtest and evaluation

Crown Point Systems is a provider of C5ISR (Command, Control, Computers, Communications, Cyber, Intelligence, Surveillance, and Reconnaissance) solutions to federal agencies in the DoD and Intelligence Community spaces for more than 10 years. Headquartered in Point Loma, San Diego, California, the company designs, builds, supports, and modernizes mission-critical IT and A/V infrastructure including control rooms, command centers, auditoriums, courtrooms, training rooms, and digital signage. It also supports SCIF accreditation requirements and has experie

buildC5ISR solutionsCyber Security proceduresIT and A/V infrastructure designmodernizationreselling hardware and softwareSCIF accreditation supportsupport

Cyber Guardian Threat Solutions (CGTS) is a Service-Disabled Veteran-Owned Small Business (SDVOSB) providing full-spectrum cybersecurity services, Digital Forensics and Incident Response (DFIR), Penetration Testing, Risk Management Framework (RMF), Insider Threat, CMMC Pre-Assessment, and strategic consulting services since 2017. It serves commercial, not-for-profit, and government organizations.

CMMC pre-assessmentCyber Intelligence and Threat HuntingCyber & IT TrainingDigital forensics and incident response (DFIR)Hardware & Software Upgradesinsider-threatnetworking servicespenetration testingSecurity Operations Center (SOC)Security Orchestration Automation & Response (SOAR)strategic consultingvulnerability assessments

CyberSafe, LLC is a privately owned minority small business and cybersecurity consulting firm based in the Washington, DC metropolitan area. It provides cybersecurity services and solutions across multiple government agencies, helping firms and government agencies prepare Risk Management Framework (RMF) Authority To Operate (ATO), FEDRAMP, and CMMC certifications. It has over 20 years of experience supporting DoD, HUD, DHS, and Army.

ACAS/Nessus/TenableATO for Cloud (AWS, Azure, MilCloud) and on Premcontinuous monitoringindustrial securitylog monitoringNessus/ACAS Scan ReviewPrivacy Data Managementproject managementSecurity Authorizationsoftware developmentSTIG Assessmentvulnerability assessments

Cyber Systems & Services Solutions (CS3) is a Joint Venture created in 2016 by three small businesses: Software Engineering Services (managing JV partner), Applied Network Solutions, and SIM&S. CS3 has over 40 years of experience supporting the Air Force, Army, Navy, USMC, Intelligence Community, Combatant Commands and DHS, delivering cyber secure weapon systems, mission systems, and information systems. CS3 combines offensive cyber, defensive cyber, Information Assurance (IA)/Risk Management Framework (RMF) expertise with systems engineering, system int

Cyber Protection Teams (CPT)Cyber Threat EmulationCyber Vulnerability Assessment/Hunter (CVA/H)Defensive CyberInformation Assurance (IA)Offensive Cybersystem integration and testSystems Engineering

D&A Technologies, Government Solutions is a service-disabled veteran-owned small business (SDVOSB) and SBA 8(a) certified business providing enterprise systems, supply chain management, and cybersecurity services to the government sector. The company focuses on securing and optimizing IT infrastructure for mission-essential government operations.

Cloud Computing & SecurityCOOP & Disaster RecoveryCybersecurity GovernanceIV&V assessmentsRMF A&A activitiesSoftware & App SecuritySupply Chain Management

Direct Enterprise Solutions (DES) is a Next-Gen Mentor-Protégé Joint Venture (MPJV) that executes technology and industry best practices to assure customer missions across Federal, State, and Local Government sectors. DES provides cybersecurity solutions and government IT support, with certifications including ISO 9001:2015, ISO 14001:2015, ISO/IEC 20000-1:2018, ISO/IEC 27001:2022, CMMI ML3 DEV/SVC, and CMMC L2 (C3PAO).

AI and MLAssessment and Authorization (A&A)automated vulnerability/patch managementcloud security deploymentCybersecurity OperationsISCM/CDMITIL executionIT service managementlogistics and trainingRobotic Process Automation (RPA)SOARZero Trust automation

D'vine Media Solutions LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) providing cybersecurity, risk management, and cloud security consulting for federal agencies, defense organizations, and commercial enterprises. Led by a CISSP, CISM, PMP, and CEH-certified professional with 21+ years of IT and information security experience, the company has led RMF and ISSE efforts across more than 30 DoD systems.

Assessment & Authorization (A&A)Cloud Security & Vulnerability AnalysisContinuous Monitoring & Threat AssessmentInformation Systems Security Engineering (ISSE)IT Program / Availability ManagementSecurity Control Assessment & ComplianceSystems Integration & Secure Architecture Designthreat correlationvulnerability scanning

Emerald Cyber Solutions (ECS) provides cybersecurity, information assurance, CMMC, NIST 800-171, Risk Management Framework (RMF), artificial intelligence/machine learning, secure AI, compliance, training, and business IT support. It is an SBA-certified SDVOSB/EDWOSB/WOSB/VOSB serving DoD prime contractors, law firms, healthcare, education, and small businesses.

artificial intelligence / machine learningbusiness IT supportCMMCcomplianceCybersecurityinformation assuranceNIST 800-171secure AItraining

Delivering Next Generation Solutions Gen3 Technology Consulting is an IT consultancy that brings nearly 20 years of IT and management consulting expertise to Federal and commercial clients. Cybersecurity We protect the confidentiality, integrity, and availability of our clients’ data and services, and protect against unauthorized use of electronic data. Privacy We help clients implement and execute programs to protect PII and PHI and to maintain Privacy Act and NIST compliance with auditing and program management. Program & Project Management Gen3 helps clients articulate their mission and vision and develop management processes, metrics, and communications to ensure success. Management Consulting With 25+ years of management consulting, litigation support consulting, and IT management consulting, we help our clients improve performance by reducing risk and improving the delivery of.

CybersecurityeDiscoveryIT managementLitigation case managementManagement consultingPMO implementationPrivacy program managementprogram and project managementRecords management and information governanceSecurity audit and compliancestrategic communications

GRAVICOM LLC is a company focused on Cyber Security, Risk Management, and Engineering Services, providing products and services for Government and Commercial customers. It is a Navy Qualified Validator (NQV) and USMC Validator company offering senior Information Assurance professionals to build, populate, validate, and maintain Risk Management Framework (RMF) packages. It has 10+ years of corporate experience operating as a Software Support Activity (SSA) for Navy afloat systems and provides Information Security Systems Engineering for DoD Enterprise sys

ACASAssessment and Authorization (A&A)Automation and Solutions EngineeringComputer Aided Drafting and SimulationComputer Network DefenseeMASSinformation assurancePatent Protection and Intellectual Propertyprocess controlProgrammable Logic Controllers (PLCs)roboticsSCAPSTIGsSystems Integrationvulnerability management

I-Assure is a Service-disabled Veteran-owned Small Business (SDVOSB) founded in 2005 that provides fixed-price Assessment and Authorization (A&A) and Risk Management Framework (RMF) solutions to help organizations achieve Authority to Operate (ATO). The company offers proprietary automation tools, policy development, and DISA STIG compliance support, and reports over 425 successful ATOs.

Assessment and Authorization (A&A)ATO sustainmentDISA STIG compliance automationeMASS supportpolicy developmentsecurity lockdown scripting