The Cybersecurity Maturity Model Certification (CMMC) is a new cybersecurity certification which is required by the US Department of Defense (DoD). Starting in 2021, the DoD will issue RFPs which contain a level of the CMMC required to be awarded a contract. By 2026, all DoD contracts will require a CMMC certification.

Stinnett joined the CMMC ecosystem in 2020 and has obtained the designation of a Registered Practicing Organization and our employees have received and will continue to receive professional training related to CMMC compliance. Stinnett can perform readiness assessments to help your organization prepare for CMMC designation. Services include assistance with control design and gap analysis.

For more in-depth information on CMMC click here.

Stinnett will assist your company with everything from the creation of a cybersecurity program to advanced assessments of your entire environment.

Our security team are experts in cloud services, enterprise networks, industrial controls systems, data privacy compliance and all the components in between.

Our consulting services include:

• Cybersecurity Consulting
• Cloud Architecture
• Network Architecture
• Software Development
• Tabletop Exercises (IRP, DRP, BCP)
• Virtual CISO
• Privacy and Compliance (GDPR, CCPA, NIST 800-171, etc.)

Data breaches and cybersecurity incidents impose serious consequences to reputation, intellectual property and finances. The way an organization reacts to an incident has a direct impact on the overall outcome. Stinnett’s experts are well-versed in conducting incident response procedures. We can analyze logs and other critical data surrounding the incident to determine who, what, how and when. Our team members hold over 15 years’ experience in handling information systems and security, allowing us the experience necessary to properly analyze a multitude of incidents. Additionally, our penetration testers know how to quickly spot indicators of compromise and evidence of intrusion.

Let Stinnett’s professionals perform a comprehensive review of your business’ technological systems to look for potential problems with people, processes and technology. These detailed assessments might encompass any of the following criteria:

• Cloud Security Assessments
• CMMC Assessment – Defense Contractors
• Cybersecurity Framework Assessment
• Data Asset Risk Assessment
• Disaster Recovery Assessment
• Enterprise Risk & Compliance
• Identity & Access Management
• Incident Management & Response
• IT Infrastructure & Equipment Assessments
• IT Security During M&A
• Security Appliance Assessment
• Security Program Development
• Security Staff Assessments
• Supply Chain Cybersecurity Risk Management
• Web Application Firewall Assessment

Stinnett’s penetration professionals will test your computer systems and networks to find vulnerabilities that expose your business to a cyberattack.

Detailed services include:

• Application Penetration Testing
• Internal Network Penetration Testing
• External Network Penetration Testing
• Network Segmentation Testing
• OSINT / Breach Check
• Physical Penetration Testing
• Social Engineering
• Wireless Security Assessment

Stinnett has extensive experience in SCADA & ICS Operations Technology (OT) assessments. Our team holds multiple certifications, including the coveted certified Global Industrial Cyber Security Professional (GICSP). Our team of professionals and engineers can identify risks and assist your organization in putting together a plan to address gaps.

SCADA & ICS assessments include:

• Business Impact Analysis
• OT firewall architecture review
• OT firewall penetration testing
• PLC, HMI and other industrial controls vulnerability assessments
• Tabletop exercises to bring IT, OT, I&E and other operational groups together

As data privacy and cybersecurity experts, we know that an important step your organization should take is educating and informing your employees and contractors.

Stinnett’s team will train your group through the following methods:

• Application Security
• Awareness & Education
• Network Defense
• Secure Coding

Stinnett’s experts will evaluate and test your systems to identify any current or potential vulnerabilities in your business. These assessments can be one time or performed on a continuous basis.

Assessments may contain any of the following:

• ASV PCI-DSS Vulnerability Assessment
• External Network Vulnerability Assessment
• Internal Network Vulnerability Assessment
• Physical Vulnerability Assessment