About | Fulcrum Advisory

Our Approach

Grounded in Operating Experience

Fulcrum Advisory's principals bring extensive operating experience inside FOCI-mitigated defense contractors, working within live, DCSA-scrutinized compliance programs where the consequences of getting it wrong are measured in contracts and clearances.

Every engagement is grounded in that direct experience: running DCSA reviews, executing SSA and mitigation agreements, building CMMC-scoped system security plans, and deploying AI inside GCC High environments where the compliance boundary is contractually real and auditable.

The defense industrial base deserves advisors who have lived the frameworks they sell — not just studied them. That's the standard we hold ourselves to, and it shows up in the specificity of the guidance we deliver.

Work with Us

Core Expertise

FOCI SF 328 · DCSA · SSA · Proxy · Voting Trust

CMMC L2/L3 · SSP · POA&M · NIST 800-171 Rev 3

AI/ML Azure OpenAI · RAG · Bot Framework · CosmosDB

CLOUD Azure · GCC High · FedRAMP Moderate · FIPS 140-2

POLICY NISPOM · RMF · ISO 27001 · DFARS · ITAR

"Operating inside the compliance environment — not consulting into it — means every recommendation we make has been tested under the same scrutiny our clients face. That accountability doesn't end when the engagement does."

— Fulcrum Advisory

Firm Background

Built From the Inside Out

25+ yrs

Enterprise IT & Cybersecurity Across Defense & Commercial

25+ years of enterprise IT, cybersecurity, and systems engineering across defense and commercial sectors, including FOCI and SSA advisory work that predates most of the current market.

Extensive

IS & Security Leadership Inside a FOCI-Mitigated Contractor, Under Active DCSA Scrutiny

VP of IS and CISO roles inside a FOCI-mitigated defense contractor, responsible for cybersecurity strategy, DCSA compliance program management (ECP), GCC High migration, and enterprise AI adoption across classified and unclassified environments, including classified computing program stand-up.

10+ yrs

FOCI Mitigation & Direct DCSA Engagement

Primary point of contact for DCSA interactions, SSA maintenance, and FOCI mitigation agreement compliance, navigating contract actions, facility clearance renewals, and beneficial ownership disclosure cycles across multiple agreement types, including supporting facilities through initial Possessing FCL award.

1+ yr

Enterprise AI Deployment, GCC High, CMMC-Scoped

Designed and deployed a production enterprise AI assistant on Azure OpenAI, Azure AI Search (RAG), CosmosDB, and Bot Framework, entirely within a GCC High CMMC-scoped boundary. Not a reference architecture. In active production use. Working with emerging technology before it becomes standard practice has been a consistent pattern across a 25-year career in enterprise IS.

Insider

Practitioner experience operating inside a FOCI-mitigated contractor under active DCSA oversight — not consulting in from the outside

DCSA

Direct DCSA engagement — primary interface for FOCI reviews, mitigation agreement compliance, and facility clearance actions

Direct

Advisory led personally. Where specialist execution is needed, we identify the right consultant for the scope, stay engaged, and ensure the deliverable fits your situation rather than a template.

About Fulcrum Advisory