CMMC Compliance Demystified: Insights from Government & Industry Experts

For nearly five years, she has served on the Small Business Committee, including two years as Chairman, representing the interests of over 65% of ISOA members. Her dedication extends to being an active member of the Cyber, Technology & Innovation Committee, and she has been involved with the Afghanistan Working Group since the U.S. withdrawal. Additionally, she serves as the Second Vice President at the Society of Military Engineers (SAME) Blue Ridge Post.

Brian previously worked at the Federal Aviation Administration advising on procurements and contract administration for software and IT systems and support, including the concurrent competitions of multiple GSA schedule cybersecurity service contracts and a new, multibillion-dollar support contract vehicle.

His bar licenses include D.C., Virginia, and Delaware, where Brian practiced in the Chancery and U.S. Bankruptcy courts.

He is also responsible for supporting the clients of Aethon Security with thoroughly documenting the compliance of their Covered Contractor Information System through a System Security Plan (SSP) written to NIST SP 800-171A and gathering supporting artifacts.

Prior to starting Aethon Security, Derek was the Director of Cybersecurity Operations of a Managed Security Service Provider (MSSP) and the Deputy CISO of a CMMC 3rd Party Assessment Organization (C3PAO). While at the MSSP, he led a team that guided 2 defense contractors through 110-perfect score Joint Surveillance Voluntary Assessments (JSVA) – the equivalent of CMMC Level 2 certification assessments. At Aethon Security, he and his team also led a multinational parts manufacture to a perfect score JSVA just days before the CMMC rule became effective, securing the one of the first CMMC Level 2 certifications.

Derek holds the Certified Information Systems Security Professional (CISSP) and Certified Cloud Security Professional (CCSP) certifications from ISC2, the Lead Certified CMMC Assessor (CCA) certification from the Cyber AB, and a Master of Business Administration from William and Mary’s Raymond A. Mason School of Business.