OC2 Cyber provides executive-level cybersecurity, AI governance and risk management leadership to federal, state and local agencies, prime contractors and the defense industrial base. Our principals bring decades in cybersecurity and have held the top security leadership role, CISO, in their organizations, including protecting environments targeted by nation-state adversaries. We plug in as named key personnel, fractional CISO, ISSO/ISSM support or subject matter experts where a program or proposal needs proven leadership.
Security program leadership and ISSO/ISSM support: governance, policy, budgeting, metrics and executive risk reporting.
Programs aligned to NIST AI RMF, OMB M-25-21 and ISO 42001. High-impact and agentic AI risk assessment.
Secure adoption of generative and agentic AI: data protection, access controls and human-in-the-loop design.
Readiness gap assessments, SSP and POA&M, SPRS validation and subcontractor flow-down reviews.
IR plans, tabletop exercises and incident command for nation-state and criminal intrusions.
Control assessments and risk programs mapped to NIST 800-53, CSF 2.0 and ISO 27001, with remediation tracking and ongoing control monitoring, plus third-party and supply chain risk management (SCRM).
Protecting AI systems against prompt injection, data leakage, model poisoning and AI supply chain risk. AI red-team scoping, use-case inventories and governance under OMB M-25-21.
Cryptographic inventory, quantum-vulnerability risk assessment and a prioritized PQC migration roadmap.
Maturity assessments and roadmaps against CISA and DoD zero trust models, with FY2027 target-level deadlines in view.
SCRM and third-party risk programs, foreign-vendor scrutiny and continuous visibility into where sensitive data lives and who can reach it.
Federal agencies and prime contractors, plus District of Columbia, Maryland and Virginia government, utilities, transit, healthcare and higher education. Support for incident readiness, third-party risk and HIPAA and Medicaid data protection, including work funded through state and local cybersecurity grant programs.
CISSP and CISM qualify for DoD 8140 cybersecurity management work roles.
Kyle Salous, Founder & Principal · kyle@oc2cyber.com · (703) 405-2626