Galaxy Consulting, LLC

Government and defence contractors that need to meet federal cybersecurity rules are the core audience for this Maryland firm, which works from Fort Washington. The firm is accredited by the Cyber-AB as a CMMC Registered Provider Organization, in its own words, and it pairs that advisory role with a broader IT and professional services practice.

Preparing small contractors for CMMC

Companies that hold Department of Defense contracts or subcontracts may already be required to meet Level 1 of the Cybersecurity Maturity Model Certification. The firm helps them get there through gap assessments, self-assessments, remediation work and the documentation an assessor expects. It also supports preparation for Level 2 and for official self-assessment or third-party testing. It says it holds Level 1 and Level 2 status itself and keeps practitioners on staff for this work.

Seven areas of technical and professional work

Beyond compliance, the company lists IT infrastructure, cybersecurity, program management, software development, facility management and federal compliance among its core capabilities. In practice that spans hardware and software supply, installation and integration with round-the-clock help desk cover, security framework compliance work (NIST 800-53 among them), packages that support a system's authority to operate, penetration testing and security architecture design. It also covers IT roadmaps and quality monitoring, custom applications and databases, procurement coordination, access control, identity management and contract administration for federal agencies. It cites ISO 9000 quality assurance expertise and says it resells products from vendors including Dell, HP and Palo Alto Networks.

Status and track record

The firm holds several certifications that matter when agencies set work aside for particular kinds of supplier. It is verified as a Service-Disabled Veteran-Owned Small Business, certified as a Small Disadvantaged Business and certified by the state of Maryland as a Minority Business Enterprise. Its management team reports more than 75 years of combined military and technology experience, and its staff carry credentials such as PMP, CISSP and CEH. The company names the Department of Veterans Affairs, the Department of the Navy, US Marine Forces Pacific and Maryland state agencies among its customers, and it also serves international organizations and private firms.

Galaxy Consulting, LLC is an IT and cybersecurity services company in Fort Washington, Maryland. It is an authorised CMMC Registered Provider Organization under the Cyber-AB, and it supports federal and state agencies as well as the defence contractors that work for them.

Products and services

• CMMC compliance: gap analysis, self-assessments, remediation, documentation and preparation for Level 1 and Level 2 assessments.
• IT infrastructure: hardware and software supply, installation, integration and round-the-clock help desk support.
• Cybersecurity: NIST 800-53 compliance, authority-to-operate packages, penetration testing and security architecture.
• Program management: IT roadmaps, project planning, quality monitoring and stakeholder coordination.
• Software development: custom applications and databases to modernise operations.
• Facility and compliance support: procurement, service-level monitoring, access control, identity management and contract administration.

Customers and markets

The company serves US government agencies, international organisations and private firms, particularly small businesses holding Department of Defense contracts that must meet CMMC rules.

Key facts

• Based in: Fort Washington, Maryland, USA
• Ownership: Service-Disabled Veteran-Owned Small Business
• Certifications: Cyber-AB authorised CMMC RPO; Maryland Minority Business Enterprise
• Experience: management team with military, commercial and government backgrounds