our services

---

Hornback Strategic Services has laser focused on CMMC and the underlying NIST foundations

 for CMMC.  We provide comprehensive CMMC-related and adjacent services 

for all phases of the enterprise compliance journey, including: 

• Gap assessment and analysis 
• Risk assessment and mitigation 
• Threat modeling 
• Information security strategy and program review, design/re-design, fiscal planning and spending prioritization 
• Information security team training and consulting 
• Incident response plan review, design and testing via tabletop exercises 
• Disaster recovery plan review, design and testing via tabletop exercises 
• Business continuity plan review, design and testing via tabletop exercises 
• Business Impact Analysis 
• Information security architecture review and design 
• Information security controls review, evaluation and design 
• Audit preparation 
• Policy, standard, and process documentation review, update, creation 
• System Security Plan review and development 
• CMMC Executive Briefing and strategic roadmap development 
• CMMC readiness assessment 
• CMMC scope analysis and definition 
• Strategic remediation support