CMMC Level 2, NIST SP 800-171 and ISO 27001 support for the Defense Industrial BaseNorthern Virginia  |  Serving contractors nationwide

Our team

Assessor-credentialed, cleared and experienced in running security operations for the Department of Defense. We've been on the side of the table that defends networks, not just the side that writes about them.

Certifications our team holds

Credentials from the Cyber AB, ISC2, ISACA, CompTIA, PMI and accredited ISO training bodies, plus active security clearances.

CMMC ecosystem

CCA
Certified CMMC AssessorThe Cyber AB
CCP
Certified CMMC ProfessionalThe Cyber AB

Audit and governance

ISO LA
ISO/IEC 27001 Lead AuditorAccredited training body
CISM
Certified Information Security ManagerISACA
PMP
Project Management ProfessionalPMI

Security architecture

CISSP
Certified Information Systems Security ProfessionalISC2
CCSP
Certified Cloud Security ProfessionalISC2
CASP+
Advanced Security PractitionerCompTIA

Operations and clearance

CySA+
Cybersecurity AnalystCompTIA
PT+
PenTest+CompTIA
TS/SCI
Top Secret / SCICleared personnel

Experience that shows up in the work

Our background is operational. That shapes how we advise: practical controls, realistic timelines and documentation that matches what your systems actually do.

DoD security operations

Our team has led Tier 2 security operations supporting the U.S. Marine Corps, triaging and responding to threats in a DoD environment every day.

CMMC assessment methodology

We hold the Cyber AB's assessor and professional credentials, and we prepare clients using the same assessment objectives and evidence standards a C3PAO applies.

Audit and governance

ISO 27001 Lead Auditor and CISM credentials mean we build programs that survive audit: defined owners, measurable controls and evidence on file.

Engineering and project delivery

An engineering and PMP background means scoped work, clear milestones and a schedule you can plan contracts around.

Contracting information

For primes, contracting officers and procurement teams.

CodeDescription
NAICS 541512Computer Systems Design Services
NAICS 541519Other Computer Related Services
NAICS 541611Administrative Management and General Management Consulting Services
NAICS 541690Other Scientific and Technical Consulting Services
NAICS 611430Professional and Management Development Training

Independence by design

GreenOak never performs a certification assessment for an organization it has advised. Our assessor credentials make us better advisors. They are never a conflict of interest for your certification.

Talk to our team

Free scoping consultation. No sales pitch, just a straight read on where you stand.

Request a consultation