THE PRYDWEN ADVISORY

For the Small or Medium sized Government Contractor, Cyber Security is No Longer a “Nice To Have.”

Practical NIST SP800-171 Guidance for Government Contractors

You’re probably already doing a lot right. Let’s prove it, document it, and close the real gaps together—so you stay contract-eligible, audit-ready, and in control

NIST SP 800-171 Guidance

Clarity, confidence, and a real plan—without the jargon.

Quick gap assessments in plain English – you’re probably closer than you think..
See exactly where you stand, what’s urgent, and what can wait – target your energy.
Receive an actionable, prioritized roadmap—not just a checklist.
Early “quick wins” to calm nerves and get contracts moving.

What a 800-171 Health Check Includes

• A focused intake to understand your current Cyber posture
• Clarity on compliance gaps that matter most
• A realistic, prioritized compliance roadmap

GRC Programs

Holistic compliance and risk leadership—without fear, jargon, or chaos.

Turn NIST 800-171, DFARS 7012 and FAR Part 40 requirements into “table stakes”—not endless headaches.
Build cyber understanding into your culture – your keyboards are your front line.
Get practical, repeatable processes for contracts, internal reviews, and future regulations.
Stay audit-ready even as the rules (and threats) evolve.

Fractional CIO

Get executive expertise—minus the big price tag.

Stop worrying about compliance deadlines—have an expert in your corner.
Guidance on decisions – don’t let good intentions cause a re-audit.
Not just plans and policies—confidence, clarity, and peace of mind.
“People Friendly”— No jargon, no BS, just solid answers.

30+ years guiding government contractors through evolving compliance and security requirements—no jargon, no drama.

Mr. Bates' organizational skills and in-depth knowledge of the CMMC Regulation got us through our self-assessment with ease.

Just a 30-minute meeting with Rich told us the five first steps we had to take before we even spoke to a large Cyber consulting firm.

The Prydwen's "Do It Your Self" kit plus their Quality Assurance Methodology are worth every dollar.

The Prydwen may be the flagship of the Brotherhood of Steel, but THIS Prydwen is dedicated to helping real people with real (and maybe even dangerous) tech!

Why Choose The Prydwen?

You’re probably already doing a lot right.

The Prydwen exists to translate DFARS, FAR and related requirements into clear decisions and practical action—so contractors can stay eligible, confident, and focused on their real work.

If you want straight answers, plain language, and guidance that respects your time and budget, this is how the work gets done.

Whether you need straight-shooting advice or a roll-up-my-sleeves partner, we make cybersecurity friendly, practical, and finally under your control.

Let’s prove what works, close the gaps, and keep your Government business moving forward—without drama, jargon or Power Armor.

Uncertain Where To Start?

Our Trusted Partners

Phone: +1-615-931-3878

Email: rbates@theprydwen.com

CMMC & Compliance FAQs

What is NIST SP 800-171 and who needs it?

The Cybersecurity Maturity Model Certification (CMMC) is a Department of Defense requirement for contractors that handle Controlled Unclassified Information (CUI). All DoD contractors will need to demonstrate CMMC compliance at some level to remain eligible for future work. FAR Part 40 extends this requirement to ALL Government Contracts.

What does a NIST 800-171 Health Check include?

We will start with the five essential elements that you need to move forward with a CMMC or FAR 3rd Party Assessor. A NIST 800-171 Health Check provides a focused review of your current posture, identifies compliance gaps that actually matter, and delivers a clear, prioritized roadmap for next steps. The goal is to gain clarity—not to overwhelm.

Do you work with small and mid-sized Government contractors?

Absolutely! The small and medium sized DoD contractor is in a tight spot. They need to get Cyber certified, or risk losing contracts. But they are also working on a shoestring. We offer cost effective, results oriented advisory services and will help you find cost effective solutions for NIST 800-171 Compliance.

Can you help with NIST 800-171, DFARS and FAR requirements?

Yes. CMMC and FAR Part 40 build on NIST 800-171, and DFARS cybersecurity requirements are closely related. Support includes gap analysis, documentation guidance, and practical alignment with contract obligations.

Will you tell us if we’re already doing things right?

Yes. Most organizations are doing more right than they think. The focus is on validating what’s working, correcting what isn’t, and avoiding unnecessary effort or expense.

Disclaimer: The Prydwen referenced herein is not affiliated, allied, or on speaking terms with the Brotherhood of Steel, Elder Maxson, or any parties pursuing the elimination of synths, technology hoarding, or military airship dominance in any alternate universe or Commonwealth. No power armor, Vertibird squadrons, confiscatory raids, or mysterious scientific agendas are deployed as part of our cybersecurity advisory programs. This Prydwen is strictly committed to empowering friendly, real-world humans to understand and navigate compliance—Nuka-Cola optional, but recommended.