SERVICES

---

Governance, Risk Management, Compliance 

• IT system full RMF lifecycle management
• Cybersecurity artifact generation
• ​NIST 800-53 RMF expertise
• NIST 800 series, USAF 17 series, DoD 8500 expertise
• DISA Cloud SRG, CCPG  demonstrated knowledge
• STIG engineering and compliance
• eMASS, Xacta expertise
• Source code bug and vulnerability management and mitigation

IT & Cybersecurity 

• ​​​​Cloud Systems Administration
• ​DevSecOps CI/CD pipelines
• ​Legacy IT support
• Legacy to Cloud upgrade projects
• New Cloud engineering and deployments
• IaaS, PaaS, SaaS, IaaC
• AWS, Azure Gov Cloud, DoD PA  authorized Cloud environments, and FedRAMP-approved Clouds 
• Development Commercial Cloud  environments
• USAF system compliance

Risk Assessments

• ​​NIST 800-171 gap analysis/assessments
• DFARS 252.204-7012 assessments
• DoD Provisional Authorization (DoD PA)
• Cloud Service Provider (CSP)  expertise
• FedRAMP expertise
• Cloud Security Requirements (SRG) expertise
• Proven Cloud Connection Process  Guide (CCPG) understanding

---

Bull Bear Personnel Certifications

 

-ISC2 CISSP credentialed staff
-Comptia Security+
-Comptia Network+
-Comptia A+
-Microsoft Certified Professionals

Whitepapers

Tribal Broadband

---

Certified Entity-owned 8(a) Sole Source and Competitive

GSA MAS IT-70 8(a) Sole Source and Competitive Pool

BIA ITSS IDIQ

Seaport NxG

MDA SHIELD