About Cyber DSC
A law degree and a network background, on the same assessment.
Most compliance work splits in two. Someone reads the clause. Someone else configures the system. The gap between them is where SSPs stop describing real environments and evidence stops holding up.
Cyber DSC is led by Nabiha Sofia Herradi, who does both — reading DFARS 252.204-7012 the way an assessor reads it, then checking whether the control is actually implemented the way the document claims.
CMMC-CCP · CISM · CIPP/E · CIPP/US
Credentials
What sits behind the assessment.
Certifications matter here for one reason: they determine whether the person reading your contract clauses and testing your controls has been examined on the same material your assessor has.
- LL.B.
- Bachelor of Laws. Interpretation of DFARS 252.204-7012, NIST SP 800-171, and international privacy law as written, not as summarized by a vendor.
- A.S. IT NETWORKING
- Networking & Security Engineering. Translating control language into system configuration, boundary design, and architecture that survives testing.
- CMMC-CCP
- Certified CMMC Professional. Trained under the CMMC Accreditation Body on the assessment process applied to the defense industrial base.
- CISM
- Certified Information Security Manager. Enterprise risk management and security program governance.
- CIPP/US · CIPP/E
- Certified Information Privacy Professional. Dual-region qualification covering United States and European data protection regimes.
How we work
Documentation that describes your environment.
The mission is narrow on purpose: give defense contractors a defensible path to CMMC Level 2, with evidence that matches what the systems actually do.
Evidence first
Every control statement is written against something that can be shown to an assessor — a configuration, a log, a signed procedure. Not an intention.
Your team defends it
Deliverables are walked through with the people who will be interviewed, so the work holds after the engagement ends.
Fixed scope, fixed fee
The price published on the services page is the price on the proposal. No hourly drift, no surprise invoices.
Next step
Find out where you actually stand.
Thirty minutes, no charge. We establish what your contracts require and tell you plainly whether you need us.