Shadowscape

For a lot of businesses, a security assessment ends with a report landing in someone’s inbox. The report is usually solid. A month later, it’s buried under everything else competing for the owner’s attention. Meanwhile, the findings are still there. The admin account a former employee can still log into. The patch that keeps getting pushed to next week. Nobody was told those were their job, so they quietly became nobody’s job. That’s the gap APS was built for. We assess your business, then we stay to help secure it, making sure every fix has a named owner. After that we keep watching, so monitoring leads to action, and as your business changes we come back and assess again. If you have a security report sitting in a folder right now, we’d be glad to talk through what it would take to finish the job. Send a note to [email protected].

🎃🦇 WHAT WE DO IN THE SHADOWSCAPE: VOLUME 2 🦇🎃 The shadows are getting crowded. Last Halloween, we introduced you to the monsters lurking in the Shadowscape. Apparently, we weren't scary enough, because this year, we've multiplied. 🧛‍♂️ It's been a big year at Shadowscape. We've grown our team, expanded our capabilities, and welcomed some incredible talent into our ranks. More threat hunters. More cyber risk analysts. More cybersecurity architects. More CMMC experts. And apparently, a whole lot more vampires. But while the cast has grown, our mission hasn't changed. We still hunt the threats hiding in your networks, expose the risks lurking beneath the surface, and help organizations defend against the things that really do go bump in the night. From threat intelligence and cyber risk quantification to continuous security assessments, penetration testing, and CMMC readiness, our growing team brings more expertise, more perspectives, and more firepower to the fight. Because the only thing scarier than what you don't know is what you don't know you don't know. 💀 To our growing crew of creatures of the night: thank you for making this past year one of our best yet. We're proud of the team we're building and excited about what's ahead. Same mission. Bigger team. More monsters. Happy Halloween from all of us at Shadowscape! 🎃 #Shadowscape #Cybersecurity #ThreatIntelligence #CyberRisk #CMMC #PenetrationTesting #Halloween #WhatWeDoInTheShadows

DoW made a major announcement regarding CMMC this week. What changed? How are you impacted? Should you still move forward? Join Shadowscape / 1st Defense & Eide Bailly at the Idaho CMMC Summit in Boise, Idaho (and online) on Aug. 27 to hear what the Department of War's recent announcement means and, more importantly, what it doesn't. Self-assessments remain a requirement, meaning organizations still need to be prepared. That's exactly what this summit is designed to help with. Participate in interactive discussions and mock assessments that are designed for small and mid-sized DIB contractors. This event gives you direct access to experienced assessors. Hear what requirements and risks remain in place, and why organizations still need to confidently submit an accurate SPRS score: - How DIBCAC views organizations with third-party assessments - Building a defensible self-assessment - Insurance and cyber liability considerations - Reducing False Claims Act risk - What prime contractors are expecting from suppliers - When a third-party assessment makes business sense If you're waiting for the government's 60-day review to eliminate uncertainty, you're putting preparation on hold. Use this time to strengthen your cybersecurity program instead. Register here: zurl.co/eVLaN #CMMC #IdahoCMMCSummit #DoW #Cybersecurity #DefenseIndustrialBase

Wanna do something new and exciting in the cybersecurity/GRC world? Invest in yourself! Sign up for our CMMC Certified Professional training led by an active Lead CMMC Assessor. Due to the increased demand for CMMC professionals, we are doing 2 CCP courses during July! Here's what sets these courses apart: • Learn directly from Mark DeBry (LCCA, CCI), President & Co-Founder of 1st Defense CMMC, with experience across 40+ CMMC assessments • Build a strong foundation in the CMMC framework, domains, levels, and practices • Becoming a CCP is a prerequisite to becoming an Assessor (CCA), so the faster you become a CCP the faster you become an Assessor • Prepare for CCP certification with live instruction, course materials, and practice exams • Includes 1 year of Learning Management System (LMS) access for continued learning after the course • Join the Shadowscape / 1st Defense CMMC community and gain access to ongoing lessons learned from experienced practitioners July Cohort 1 Details: • July 6, 9, 20 & 23 • 4 live sessions • 11 AM - 1 PM ET (9 AM - 11 AM MT) • $1,979, which is $200 off our normal price! Register: zurl.co/NcCCv July Cohort 2 Details: • July 28 & 30 • 2 live sessions • 12 PM-4 PM ET (10 AM-2 PM MT) • $1,979, which is $200 off our normal price! Register: zurl.co/3TLAn Whether you're preparing for a role in the CMMC ecosystem or looking to deepen your knowledge, this course provides practical training from professionals actively conducting assessments today. Register using the links above or scan a QR code in the graphics. #CMMC #CMMCTraining #CCP #Cybersecurity #CybersecurityTraining #DefenseIndustrialBase #C3PAO #1stDefenseCMMC #CCA

We’re excited to welcome Devon Ellis to Shadowscape as our new Senior Offensive Security Engineer. Devon joins us from MITRE, where he spent years supporting advanced security capability development, adversary emulation, detection engineering, and ATT&CK Enterprise Evaluations. His 10+ year background includes red and purple team operations, custom adversary development, Splunk and SIGMA detection engineering, cloud security, DevSecOps automation, and application security research focused on improving real defensive outcomes — not just generating findings. He also serves as an Adjunct Professor of Cybersecurity at Northwest Nazarene University, helping prepare the next generation of cyber defenders through hands-on technical instruction. As Shadowscape continues expanding our intelligence-driven offensive security and threat-informed defense capabilities, Devon adds exactly the kind of deep technical expertise and analytical mindset we seek to collaborate with to better serve our customers. Welcome to the team, Devon! #CyberSecurity #ThreatInformedDefense #OffensiveSecurity #PurpleTeam #DetectionEngineering #AdversaryEmulation #IntelDrivenSecurity

Accelerate your career with CMMC Certification Professional (CCP) Training - without taking time from your day job! Our CCP Course is designed to give you real-world insight from an assessor actively involved in dozens of CMMC assessments, applying real experiences to every concept. This isn't like other courses - check out the value to you: • Mark DeBry, Lead CMMC Assessor (LCCA, PI) has experience on 25+ CMMC assessments and shares lessons learned that apply to each principle • After-hours training (Mon & Thu, 6–8 PM ET) avoids conflict with your job • Competitive pricing under $2,000 includes live instruction, additional learning management system (LMS) access, and practice exams • Automatically includes you in the Shadowscape / 1st Defense CMMC community of Lead CCAs, CCAs, and CCPs and our weekly lessons learned meeting This course is more than just training, it’s a direct connection into our CMMC ecosystem and our network of assessors and C3PAOs. CCP Course Details: • June 1, 4, 8, 11, 2026 • 4 live virtual sessions, 6-8 PM ET, 2 hrs each • Includes 1-year access to our LMS with additional learning material • $1,979 (Save $200 off original price) Save $679 when you purchase the CCP & CCA course together! Group discounts available: additional $200 off per person for companies of 2 or more. We'd love to help you advance your career in the CMMC ecosystem - scan the QR code to register, or contact us with questions: [email protected] or 208-391-2956 #CMMC #CMMCTraining #CCP #CCA #C3PAO #RPO #RP #CybersecurityCareers #1stDefenseCMMC

🚨 Team Announcement 🚨 We’re excited to welcome Mike George, Ph.D. as our new Principal Cybersecurity Architect & Certified CMMC Assessor (CCA) at Shadowscape. Mike brings a rare blend of deep technical expertise, advanced analytics, and mission-driven cyber operations. He has held senior roles across industry and government—including CISO/CTO, Chief Data Scientist, and Director of Federal Threat Hunt—building capabilities across threat hunting, data science, vulnerability management, and large-scale security operations. His background includes: - Leading threat hunt operations across federal agencies - Building analytics-driven cyber risk and vulnerability management platforms - Designing security architectures for complex and regulated environments - Applying advanced modeling and data science to real-world cyber problems Mike’s experience doesn’t just live in theory—it’s grounded in years of operational work, including time supporting national-level missions. That combination of architecture + analytics + operational execution is exactly what we’re building at Shadowscape. Welcome to the team, Mike! #Cybersecurity #CMMC #CCA #TeamGrowth #ThreatHunting #CyberRisk #DefenseIndustrialBase

🌱 Spring 2026 CMMC CCP / CCA Training — Now Open Our Spring 2026 CMMC certification cohorts are live, continuing the momentum into the heart of the assessment season. These courses are designed to take you from foundational CMMC competence to assessor-level readiness, with real-world insight into how assessments are actually conducted. 🧠 CMMC Certified Professional (CCP) 📅 March 9–19, 2026 🕕 4 live virtual sessions (Mon & Thu, 6–8 PM ET) 💰 $1,979 (Save $200) 🔒 CMMC Certified Assessor (CCA) 📅 April 6–16, 2026 🕕 4 live virtual sessions (Mon & Thu, 6–8 PM ET) 💰 $2,179 (Save $300) 🔥 CCP + CCA Bundle Save $500 — from foundational competence to certified lead assessor readiness. All courses are taught by Mark DeBry, Lead CMMC Assessor (LCCA, PI), with experience across 25+ CMMC assessments, sharing what assessors actually look for. 📲 Scan the QR code or visit shadowscape.io/cyber-trainin… to register. Group discounts available. 📌 #CMMC #CMMCTraining #CCP #CCA #DoDCompliance #DefenseIndustrialBase #CybersecurityCareers

The final member to join the 1st Defense team is our newest team member Brian Kendall as a senior CMMC Assessment Specialist! Brian joined us this month and has already proven himself to be an exceptionally valuable member of the team! Brian is a CMMC Certified Assessor (CCA) and retired USAF Information Systems Security Officer (ISSO), with over 18 years of experience in IT, and over 10 years of experience in compliance. He has participated in numerous CMMC assessments, and managed NIST SP 800-53 System Security Packages for DoD networks. Brian's experience is backed by a master's degree in Cybersecurity and Leadership (MCL) and continued dedication to professional development. His number one priority to help Defense Industrial Base partners meet their compliance needs. Please join us in saying welcome! #CMMC #CybersecurityCareers #CyberAssessments #DefenseContracting

Joining Mark and the 1st Defense CMMC team on this new journey will be our Executive Vice President, Steve Jurovic! Steve brings an incredible depth of leadership and experience to the Shadowscape ecosystem — from serving as a Gartner Executive Advisor to Fortune 100 CIOs, CISOs, and Boards, to leading IT Risk & Security at State Farm. He’s a proven expert in building resilient cybersecurity, governance, and compliance programs and has led enterprise risk and security operations across highly regulated industries. Please join us in welcoming Steve to the the new 1st CMMC Defense team!! #Leadership #Cybersecurity #CMMC #Governance #TeamGrowth #WelcomeAboard