STEEL ROOT, INC.

CMMC READY

Providing training in the field of compliance with cybersecurity laws, regulations, and policies;CYBER SECURITY MATURITY MODEL CERTIFICATION READY;Business consultation in the field of assessing and validating cybersecurity capabilities and regulatory compliance with the Cybersecurity Maturity Model Certification (CMMC), the Federal Acquisition Regulation (FAR), the Defense Federal Acquisition Regulation Supplement (DFARS), and related laws, regulations, and policies;Regulatory compliance auditing and consultancy in the field of cybersecurity; Consulting for businesses in the field of Cybersecurity Maturity Model Certification (CMMC), namely, assessing and validating cybersecurity capabilities and regulatory compliance auditing;CMMC;Computer security consultancy in the field of program management, cyber security, threat intelligence, security engineering, and information systems security for others; Managed information technology security services delivered through security operations centers, namely, monitoring, reporting, analysis, and remediation of events collected from computer network and security devices for the purposes of protecting data and restricting unauthorized access to computers and computer networks; Managed security information and event management (SIEM) for computers and computer networks, namely, access control of users of computing resources based on assigned credentials, intrusion detection, intrusion prevention, data loss prevention, application security, endpoint security, and forensics and incident response; Design, development, configuration, and implementation of computer-based information systems for others; Consultation in the field of computer-based information systems design and development;

STEEL ROOT

Business consultation in the field of Cybersecurity Maturity Model Certification (CMMC), namely, assessing and validating cybersecurity capabilities;Regulatory compliance auditing and consultancy in the field of cybersecurity; regulatory compliance auditing;Cybersecurity services in the nature of restricting unauthorized access to computer systems; Computer and computer network security consultancy; Computer and computer network consulting services in the field of cybersecurity, namely, cybersecurity assessment, penetration testing, vulnerability management, incident response and forensics, cybersecurity policy and procedure documentation; Data breach response services, namely, threat assessment, breach containment and mitigation, and emergency response to computer and network security breaches; Managed information technology security services, namely, managing information technology systems for purposes of maintaining computer security, Internet security, data security, and cybersecurity; Managed computer security services delivered through security operations centers, namely, namely, managing information technology systems for purposes of security information and event management (SIEM), computer network monitoring and network access control, intrusion detection, intrusion prevention, data loss prevention, application security, endpoint security, and forensics and incident response; Managed IT services, namely, computer network server and system administration, computer network design and implementation, email and data server hosting, and backup and disaster recovery services of computer data;