CMMC Audit Pros

Dave Gray and CMMC Audit Pros offers a comprehensive and step by step approach to cybersecurity and compliance via nationally accepted frameworks such as CMMC and NIST. Dave Gray, CMMC consultant, assessor, and instructor, provides expertise in all CMMC aspects through affiliations with CMMC Third Party Assessment Organizations (C3PAOs), CMMC Licensed Training Providers (LTPs), and directly through his LLC.

Consulting

Cybersecurity Maturity Model Certification (CMMC) Readiness
Supplier Performance Risk System (SPRS) Readiness
Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 Guidance

Assessing

Cybersecurity Maturity Model Certification (CMMC) Assessment
NIST DoD Assessment Methodology - Scoring
Supplier Performance Requirements System (SPRS) Assessment

Teaching

Certified CMMC Professional (CCP)
Certified CMMC Provisional Assessor (PA)
Certified CMMC Provisional Instructor (PI)
DoD CyberSecurity Maturity Model Certification (CMMC) analysis and preparation.
Certified Information Systems Security Professional (CISSP)
Security+
Project Management Professional (PMP)

ABOUT DAVE GRAY

Dave Gray is a Cybersecurity CMMC Consultant, Assessor, and Instructor

Dave is one of the first CMMC Provisional Assessors to have completed all related CCP and CCA certifications, resulting in no DoD assessment restrictions regarding participation in three prerequisite CMMC assessments.

Dave Gray is a CMMC, CISSP, CAP, PMP and CEH certified Information Technology Leader skilled in securing information systems to achieve information confidentiality, integrity and availability. Dave focuses on Governance, Risk Management, and Compliance (GRC) using information security frameworks established by the Cybersecurity Maturity Model Certification (CMMC) for Federal Contract Information (FCI) and Controlled Unclassified Information (CUI).

Dave consults regularly for DoD Defense Industrial Base (DIB) vendors regarding the National Institute of Standards and Technology (NIST) Department of Defense (DoD) Assessment Methodology. Dave promotes Cybersecurity as a key enabler for organizational and enterprise success, aligning effort levels with outcomes through consulting, assessing and teaching cybersecurity courses.