Cybersecurity & GRC · Georgia · SDVOSB
Focal Point Dynamics assesses Georgia cities, counties, and authorities against NIST CSF 2.0, then hands leadership a prioritized risk register, a remediation roadmap, and a briefing that shows what to fix first and why.
Fixed scope · Principal-delivered · Plain language
For municipalities, counties, authorities, and agencies that run critical services on lean IT teams and need an objective view of cyber risk before the next budget cycle, audit, insurance renewal, or incident.
Your people, processes, systems, and vendors as they operate today.
Scored results across Govern, Identify, Protect, Detect, Respond, and Recover.
Findings and implications written for decision-makers, not just IT.
Each risk rated, owned, and linked to a recommended treatment.
Sequenced actions across near-term, mid-term, and long-term horizons.
A working session with leadership to walk through results and decisions.
Confirm departments, systems, vendors, and stakeholders. Agree on fixed scope and schedule.
Interviews, document review, and evidence checks against NIST CSF 2.0.
Score findings, build the risk register, and sequence the roadmap.
Deliver the report and brief leadership on priorities and next steps.
Each follow-on service maps directly to findings in your roadmap.
Complementary Service
The DOJ's Title II rule sets WCAG 2.1 Level AA as the technical standard for state and local government web content and mobile apps.
This readiness assessment shows where your public-facing sites stand and what to address first. It can be scoped alongside the cybersecurity assessment.
Ask about ADA Title II readinessStart with a 30-minute scoping call covering your environment, your purchasing route, and what the assessment would include.
For government primes, MSPs, MSSPs, VARs, and integrators who deliver the technology and need a partner for the risk, policy, and executive-reporting work that public-sector customers increasingly require.
| Legal name | Focal Point Dynamics LLC |
|---|---|
| Socioeconomic status | SDVOSB · Veteran-Owned |
| CAGE / UEI | 05N68 / HED6HBFDPPN9 |
| NAICS | 541512 · 541519 · 541690 |
| Georgia NIGP | 918-28 · 918-29 · 918-30 |
| Roles | Prime or subcontractor |
Share the opportunity, customer, and scope. We'll confirm fit and send a capability statement.
For defense and government contractors handling Federal Contract Information or Controlled Unclassified Information who need to know where they stand before a contract, a prime, or an assessor asks.
Focal Point Dynamics provides readiness consulting. We are not a C3PAO and do not conduct certification assessments or issue CMMC certifications.
Commercial organization? We also support SOC 2, ISO 27001, HIPAA, and PCI-DSS readiness. Commercial GRC services
Why Focal Point Dynamics
The person who scopes your engagement is the person who performs it and briefs your leadership.
Every report ends in ranked risks, owners, and a sequenced plan leadership can fund.
Scope, deliverables, and schedule are agreed in writing before work starts.
Two decades of Navy service applied to risk, readiness, and execution.
The Principal
Mark founded Focal Point Dynamics after 22 years in the U.S. Navy, rising from enlisted sailor to Information Warfare Officer. He brings practitioner-level fluency in NIST CSF, NIST SP 800-171, CMMC, and RMF to organizations that need security programs that work in the real world.
Pick the path that fits. Every inquiry gets a direct reply from the principal.