MATT IN CYBER LLC · CONSULTING & TRAINING
Understand the requirements.
Prepare your people.
Lead with clarity.
Practical CMMC, NIST SP 800-171 and DFARS cybersecurity guidance for defense contractors and the teams supporting them. I help leaders make informed decisions and help staff connect requirements to their everyday responsibilities.
Explore leadership supportExplore classes & workshopsHow starting prices work · Start with a focused engagement
Private virtual engagements, with in-person delivery available by separate quote. Advisory and education services, not a certification assessment.
01 · Leadership & decision support
Put cybersecurity on the leadership agenda.
Bring your leadership team together around the decisions that matter: responsibilities, priorities, resources and readiness. Start with a single briefing or establish a recurring advisory meeting.
CMMC & Cybersecurity Leadership Briefing
From $750
per private virtual briefing
Best for: Owners, executives and program leaders who need a clear starting point.
Connect CMMC and NIST SP 800-171 expectations to business priorities, accountability, resourcing and the questions your leadership team should be asking.
Starting scope: One 60-minute meeting, one preparatory intake and light tailoring to your stated goals. Detailed evidence review is not included.
You receive: A leadership-focused briefing and a concise written summary of decisions, open questions and recommended next steps.
Recurring Leadership Advisory Meetings
From $750
per month
Best for: Leaders who want a regular checkpoint without an open-ended consulting commitment.
Use a structured meeting to review CMMC readiness priorities, discuss obstacles, clarify ownership and keep agreed actions moving.
Starting scope: One 60-minute virtual meeting per month, agenda preparation and an updated action summary. No rollover, unlimited email support, implementation labor or emergency response.
You receive: An organized monthly checkpoint and an actionable record of priorities and decisions. Cadence and any between-meeting support are agreed in writing.
02 · CMMC, NIST SP 800-171 & DFARS education
Training that connects the rules to the work.
Choose a session built for your audience and objectives. Private-group starting prices below are per engagement, not per attendee, within the stated limits.
NIST SP 800-171: Requirements in Practice
From $1,250
per private virtual workshop
Best for: IT teams, security staff and program owners implementing and explaining safeguards.
Explore how security requirements connect to policies, technical implementation and objective evidence. Use selected examples to distinguish a written claim from a safeguard your team can demonstrate.
Starting scope: One workshop of up to three hours for up to 15 participants, using an existing curriculum with light tailoring. Selected topics, not a full review of every requirement.
You receive: Presentation materials and a practical takeaway checklist. The applicable revision and topic coverage are confirmed before booking.
DFARS Cybersecurity: Understand the Obligations
From $950
per private virtual class
Best for: Leadership, contracts, purchasing, IT and compliance personnel supporting defense work.
Understand the relationship between DFARS 252.204-7012, 7019, 7020 and 7021. Discuss safeguarding, incident-reporting responsibilities, DoD assessment and SPRS concepts, CMMC requirements and subcontractor flow-down considerations.
Starting scope: One two-hour class for up to 15 participants, including Q&A, using a standard curriculum. Bespoke contract review and legal interpretation are excluded.
You receive: Presentation materials, a clause-relationship reference and a list of questions to take to your contracts team or legal counsel.
CMMC Internal Team Training
From $750
per private virtual session
Best for: Employees and process owners who need role-specific understanding.
Choose a focused topic such as CUI handling, access responsibilities, evidence organization, incident escalation or assessment participation. Help your people understand what they do, why it matters and how to explain it accurately.
Starting scope: One 60- to 90-minute session for up to 15 participants using an existing presentation with light customization. New course development is quoted separately.
You receive: The agreed training session, presentation materials and a role-focused takeaway sheet. This is not an official CCP or CCA certification course.
Assessment Preparation Workshop
From $1,250
per private virtual workshop
Best for: Teams preparing for CMMC interviews, demonstrations and evidence requests.
Walk through the assessment experience, practice clear explanations of actual processes and identify where evidence needs organizing or follow-up. Preparation supports accurate demonstrations, not scripted or misleading answers.
Starting scope: One workshop of up to three hours for up to 10 participants, one preparatory meeting and a selected process walkthrough. No full gap assessment or SPRS score validation.
You receive: A preparation checklist, participant guidance and a summary of follow-up actions for the reviewed scope.
Cybersecurity Incident Tabletop Exercise
From $1,500
per facilitated virtual exercise
Best for: Leaders and operational staff who want to rehearse incident decisions.
Work through a realistic scenario and discuss escalation, communication, recovery and contractual reporting considerations. Where appropriate, frame the exercise around a defense contractor’s CUI environment.
Starting scope: One lightly tailored scenario, one planning call and up to two hours of facilitation for up to 10 participants. Technical attack simulation and live incident response are excluded.
You receive: An exercise agenda and a concise after-action summary with identified gaps, owners to assign and recommended improvements.
03 · Focused advisory & review
A useful next step does not have to be a large project.
Start with a defined question or a limited document review. Broader readiness reviews, extensive documentation and custom training programs receive a separate written proposal.
Focused CMMC & NIST SP 800-171 Advisory Session
From $250
per virtual session
Best for: Organizations with a defined question that does not require a larger engagement.
Discuss a selected requirement, evidence question or planning decision and identify a practical next step.
Starting scope: One 60-minute session, brief advance topic review and a short written recap. Document-package review, implementation and compliance determinations are excluded.
You receive: Focused guidance, relevant references and clear next steps for the agreed question.
Documentation & Technical Content Review
From $500
per focused review
Best for: Teams with existing policies, SSP sections, procedures or internal training material.
Review a selected document for clarity, technical consistency and alignment with the agreed CMMC or NIST SP 800-171 topic. Identify unsupported claims and unclear responsibilities.
Starting scope: Up to 10 pages or 20 presentation slides, one review pass and a 30-minute virtual debrief. Rewriting, full SSP reviews and implementation validation are quoted separately.
You receive: Annotated comments, proposed corrections and references for substantive findings within scope.
Clear starting prices. A written scope before work begins.
“From” prices apply to the base scope shown, not every possible engagement. Final fees depend on preparation, audience size, customization, document volume, complexity, delivery format and requested deliverables. A written proposal confirms the total price before you commit.
- Standard delivery: Virtual, for one organization, in English, using existing materials with light tailoring where stated.
- Quoted separately: Travel, on-site delivery, substantial curriculum development, larger audiences, recording or redistribution rights, additional review rounds and implementation work.
- Materials: Supplied for the client’s internal use under the agreed terms. Recording is not included by default.
- Recurring work: Meeting frequency, included support, billing and cancellation terms are confirmed in the proposal.
I confirm the applicable NIST revision, CMMC level, contract context and source guidance for your engagement before delivery. A newer publication is not automatically substituted for the requirements applicable to your situation.
A clear process and appropriate boundaries.
- Tell me the outcome you need. Share your audience, topic, preferred timing and the questions you want answered.
- Confirm fit and independence. Availability, confidentiality, outside-work restrictions and potential assessment conflicts are reviewed before acceptance.
- Agree on the engagement. Confirm the scope, sources, deliverables, participant limits and total fee in writing.
- Put the takeaways to work. Receive the agreed session or review and a practical record of next steps.
Important: These services are independent advisory and educational engagements. They do not provide legal advice, an official CMMC certification, government approval, an SPRS submission or a guaranteed assessment outcome. Formal assessments and any separately authorized services follow their applicable processes. Client leadership remains responsible for decisions, representations and implementation.
Do not submit CUI, passwords or confidential assessment evidence through the contact form or ordinary email. If sensitive information is necessary, an authorized secure exchange must be arranged first. Training can use sanitized examples.
Published references informing the subject matter
Course scope is grounded in applicable published guidance, including NIST SP 800-171 Rev. 2, Rev. 3 where relevant, and the DFARS provisions and clauses. Applicability and current requirements are confirmed for each engagement.
START WITH YOUR GOAL
What does your team need to understand next?
Tell me which engagement interests you, who would attend and what a useful outcome looks like. I will confirm fit, scope and pricing before any work begins.
Discuss consulting & leadership supportDiscuss training or a workshop