Eric L.

Eric Lunsford - Cybersecurity Assessor | Compliance Consultant | vCISO Certification - CCA | CCP | RPA | RP | SSCP | Pentest+ | Project+ | Sec+ | Net+ | A+| ECS I am Eric Lunsford, a cybersecurity professional with over 20 years of experience in management and leadership roles across the military and private IT sectors. I specialize in Cybersecurity, Governance & Compliance, Risk Management, and Secure Infrastructure Design. As a CMMC Certified Assessor (CCA), Certified CMMC Professional (CCP), Registered Practitioner Advanced (RPA), and Registered Practitioner (RP), I provide both formal CMMC/NIST 800-171 assessments and consulting services tailored to the unique needs of organizations within the Department of Defense (DoD) Defense Industrial Base (DIB) as well as Federal and Local Agencies. I hold certifications and credentials from the U.S. Army, ISC², CompTIA, Cisco, and EC-Council with specialization in Network Management, Cybersecurity, Encryption, and Information Assurance. I have provided regulatory and compliance assistance to over 100+ DoD supply chain organizations, helping companies strengthen their Supplier Performance Risk Score (SPRS), protect Federal Contract Information (FCI), secure Controlled Unclassified Information (CUI), and harden their networks and device configurations against threats. Specialties • Cybersecurity Auditing & Assessments (CMMC L1–L3, NIST 800-171, NIST 800-53) • Governance, Risk, and Compliance (GRC) documentation and program development • Network & Device Configuration Management aligned with DoD STIGs and CIS benchmarks • Virtual CISO (vCISO) Services for strategic security and compliance oversight • Policy & Procedure Development for security, privacy, and IT operations • AI & Emerging Technology Integration for compliance and security automation Frameworks & Compliance Expertise • NIST 800-53 – Federal systems • FedRAMP, StateRAMP, TX-RAMP – Federal/State cloud systems • NIST 800-171 – Contractor systems handling CUI • CMMC L1, L2, L3 – DoD contractor readiness and assessments • ISO/IEC 27000, 27001, 27002 – Information Security Management Systems • SOX – Financial reporting compliance • SOC 2 Type II – Service organization security controls • PCI-DSS – Payment card industry compliance • PHI, PII, Privacy Regulations – HIPAA and data protection requirements Project Deliverables & Capabilities Compliance Deliverables: • System Security Plans (SSP) • Plans of Action and Milestones (POA&M) • Risk Management Plans & Assessments • Incident Response Plans & Processes • Change & Configuration Management Plans • Gap Analyses & Remediation Plans • Security Policies, Procedures, Processes, Checklists, and Matrixes Technical Deliverables: • Secure Network & Topology Flow Diagrams • Scope Boundary Definitions • Encryption & Data Protection Programs • Endpoint Management & Mobile Device Management • System Testing Metrics, Storage, Backup, and Archiving solutions Consulting & Training: • GAP Assessments with remediation roadmaps • Policy development and compliance readiness coaching • Education & training for executives, HR, IT Admins, and staff • Full lifecycle compliance project management • Evidence collection, attestations, and audit preparation Professional Experience Throughout my career, I have served as: • Virtual Chief Information Security Officer (vCISO) – Advising executive teams on compliance and risk strategies • Senior Security Engineer – Implementing secure infrastructures and advanced encryption standards • Secure Infrastructure Specialist – Designing DoD-compliant architectures • Project Manager – Leading compliance, remediation, and IT modernization efforts • Security Operations Center (SOC) Analyst – Monitoring, detecting, and responding to threats Why Work With Me? I provide end-to-end cybersecurity and compliance services—from initial gap analysis and roadmap development to full assessments and audits. My approach is hands-on, practical, and tailored to each organization’s environment, ensuring not only compliance but also stronger overall security. Whether you need a CMMC assessment, NIST 800-171 consulting, ISO 27001 program build, or a vCISO to lead your security strategy, I bring the experience, certifications, and proven track record to help your organization succeed. Contact me with any questions or project requests. Let’s build your compliance roadmap and strengthen your cybersecurity posture. Eric Lunsford