# Lionfish Cyber Security

> Mission-driven, service-disabled veteran-owned (SDVOSB) cybersecurity company in Indianapolis, Indiana, founded in 2018 by Green Beret veteran Jeremy Miller. Lionfish applies the U.S. Army Special Forces philosophy of "By, With, and Through" to three things: the CMMC Rapid Deployment program that gets Department of War (DoD) subcontractors to CMMC compliance fast, training Certified CMMC Professionals (CCP) and Certified CMMC Assessors (CCA) as a Cyber AB Accredited Training Provider, and providing the Cyber Tackle Box™ — an all-in-one GRC, compliance, and workforce-training platform.

Contact: 1-877-732-6772 · info@lionfishcybersecurity.com · 3815 River Crossing Parkway, Suite 100, Indianapolis, IN 46240.

Key facts:
- Service-Disabled Veteran-Owned Small Business (SDVOSB); SAM.gov registered, CAGE 96LH8, UEI GGV3KKTQFTS3
- Cyber AB Accredited Training Provider (ATP) for official CCP and CCA certification training
- Indiana state-accredited technical school (regulated by the Office for Career and Technical Schools) and DOL-registered apprenticeship sponsor
- CCP/CCA training pricing: self-paced $1,999 per credential (includes 3 hours of one-on-one instructor time); enroll online any time. Private team cohorts by request.
- Brand tagline: "Empower * Lead * Defend"
- Four IEEE-published papers on AI and cybersecurity; patent-pending AI training methodology (#17941843)
- Partners include Purdue University CERIAS, Ball State University, Northern Virginia Community College, CompTIA, and (ISC)²
- CEO Jeremy Miller: IBJ Tech Exec of the Year; founding president of AFCEA Indiana

Why it matters now: On July 13, 2026 the Department of War suspended CMMC Phase II requirements pending a 60-day review by the CMMC Reform Task Force, effectively canceling the November 10, 2026 third-party assessment deadline. What did NOT change: Phase 1 self-assessments continue, NIST SP 800-171 compliance remains required, and DFARS 252.204-7012 safeguarding obligations remain contractually binding for the 300,000+ defense industrial base companies. The DoW has signaled reform (scalable security requirements), not repeal. Lionfish helps contractors use the suspension window to get provably secure and assessment-ready before reformed requirements land.

## Compliance frameworks covered

Lionfish provides platform + practitioner services across (each with a dedicated page under /frameworks/): NIST SP 800-171 & SPRS scoring (defense contractors under DFARS 252.204-7012), SOC 2 Type I/II (B2B SaaS), HIPAA Security Rule (covered entities and business associates), ISO/IEC 27001:2022, FedRAMP (Rev 5 and 20x Key Security Indicators), GovRAMP (formerly StateRAMP, for SLED vendors — mandated by Arizona and Nevada as of July 2026), NIST CSF 2.0, NIST AI RMF (a statutory affirmative defense under Texas's AI law), the Trusted CI Framework (NSF research cyberinfrastructure), and Sturdy 30™ — Lionfish's CIS Controls-based baseline for small businesses. The Cyber Tackle Box platform also supports NIST 800-53, NIST 800-172, HITRUST, CIS v8, FTC Safeguards Rule, and cyber-insurance readiness. CMMC Level 1 & 2 remains a core specialty at /cmmc-compliance/.

## Main pages

- [CMMC Level 2 Rapid Deployment](https://lionfishcybersecurity.com/cmmc-compliance/): Lionfish's core specialty — Level 2 readiness for contractors handling CUI: gap assessment against all 110 NIST SP 800-171 requirements, remediation, SSP/evidence preparation, and C3PAO assessment prep. Level 1 self-assessments handled quickly too. Free readiness call.
- [CCP & CCA Certification Training](https://lionfishcybersecurity.com/cmmc-training/): Official Cyber AB accredited training for Certified CMMC Professionals and Assessors — self-paced with instructor support, online enrollment.
- [Cyber Tackle Box platform](https://lionfishcybersecurity.com/cyber-tackle-box/): completely upgraded in 2026 (new Templates, Objectives, POA&M management, Intel Hub, Playbooks) — GRC + training platform for CMMC, NIST 800-171, HIPAA, SOC 2 — policy templates, awareness training (including first-of-its-kind music-based training), apprenticeship management, multi-tenant for MSPs.
- [Training Academy](https://lionfishcybersecurity.com/training-academy/): CompTIA certification tracks, DOL apprenticeships, grant-funded workforce development, and the Cyber Sentinel university program.
- [About](https://lionfishcybersecurity.com/about/): Company story, leadership team, milestones, IEEE research.
- [Contact](https://lionfishcybersecurity.com/contact/): Book a readiness call, class seat, or platform demo.