WHO WE ARE AND WHAT WE DO:

Imprimis was started in 2004 and supported government customers in two major areas: defense training and engineering. The corporation has evolved over the years and now has a robust business in cybersecurity, is still active in training, and supports space programs to include space situational awareness (SSA) instrumentation and small satellites.
The cybersecurity practice includes Risk Management and Compliance with emphasis on the DFARS/FAR and NIST cybersecurity standards, and now the new DoD CMMC (Cybersecurity Maturity Model Certification).  Imprimis is also developing a cloud-based advanced intrusion detection system (IDS) for industrial control systems and is expanding this application to system monitoring.  Training is primarily focused on cybersecurity training for everyone – the cybercitizen, cyber executive, and the IS professionals.

​

CYBERSECURITY - WHY IT IS IMPORTANT:

Cybersecurity is everyone’s problem and everyone’s responsibility.  At the end of 2016, there were 326 million Americans.  Of these, 287 million “went to the internet” with a computer or mobile device.  That is 88% of all Americans including infants and senior citizens! At the same time there were about 2.8 million trained IT professionals in the US.  So, about 1 % were trained in IT and only a small fraction of the IT professionals is trained in security.  Hackers, thieves, and state actors all see the U.S. as a “target rich environment”.  
So, if freedom to continue using IT devices is important – and it is – then the responsibility must be shared by every citizen, organization, and government.  We not only have to protect ourselves and our businesses against criminal cyber activity, but we must also accept the responsibility for keeping our connections safe with our customers, stakeholders, personnel, and business partners by practicing good cyber-hygiene.

The core competencies of cybersecurity include basics like access control, network security (on-premises, cloud, and virtual), endpoint protection, application security, and encryption.   The standards being promulgated by the National Institute for Standards and Technology (NIST) and the new Cybersecurity Maturity Model Certification (CMMC) cover the core competencies and add process and procedural elements to improve security.  However, organizations not compelled to implement standards should still implement the basic core competencies or best practices. 

Imprimis has developed three Cybersecurity programs for this purpose.  They provide the core competencies of cybersecurity and lay a foundation for future compliance efforts as they are required.