Securing Federal Missions. Protecting Businesses. Powering Healthcare.
Mission-Focused Cybersecurity.
Enterprise-Grade Protection.
Mission Project Cyber is a Service-Disabled Veteran-Owned Small Business that supports federal agencies, defense contractors, private businesses and healthcare practices with cybersecurity, compliance and technology services.
Corporate data
- UEI
- YZ2WKF9G3B69
- CAGE
- 17UC4
- SBA VetCert
- SDVOSB · VOSB
- SAM.gov
- Active
- NAICS
- 541512 · 541519 · 541611 · 518210
Division 01 · Primary business
Federal cybersecurity and government contracting
We support agencies and prime contractors with the people and documentation it takes to secure, authorize and maintain federal information systems.
RMF and ATO support
System categorization, control implementation, SSP and evidence development, and ATO package preparation and sustainment.
ISSO and ISSM support
Daily security oversight, POA&M tracking, configuration control and continuous monitoring.
NIST SP 800-53 and 800-171
Control implementation, gap assessments and documentation prepared for assessor review.
Security architecture
Cloud and on-premises security design, including Zero Trust planning aligned to federal guidance.
Vulnerability and incident readiness
Vulnerability management, incident response plans and tabletop exercises.
Prime contractors
Looking for an SDVOSB cybersecurity teaming partner for your next pursuit?
Discuss a teaming opportunityThree divisions under Mission Project Cyber LLC
Federal cybersecurity is our primary business. Our commercial and healthcare divisions are launching next and will apply the same security discipline to private organizations.
01 · Primary
Federal Cybersecurity & Government Contracting
Prime and subcontract support for federal agencies, prime contractors and the Defense Industrial Base.
02 · Launching soon
Fractional CISO, Managed Cybersecurity, IT & Compliance
Security leadership, managed protection, IT support and compliance programs for small businesses, federal contractors and regulated organizations.
03 · Launching soon
Healthcare Practice Technology & Compliance
EHR coordination, managed IT, HIPAA security support, websites and marketing for clinics, with access to licensed legal and compliance professionals.
CMMC and contractor readiness
CMMC Phase 2 is paused. NIST SP 800-171 requirements still apply.
On July 13, 2026 the Department of War suspended the move to CMMC Phase 2 and opened a review of the program. Level 1 and Level 2 self-assessments, annual SPRS affirmations and DFARS 252.204-7012 requirements remain in effect, and many prime contractors still ask suppliers for proof of NIST SP 800-171 implementation.
We help you scope your environment, close gaps, and keep documentation current so you are ready when the revised assessment requirements are published.
We provide readiness, implementation and assessment preparation. We do not issue CMMC certifications.
| Level 1 | Level 2 (Self) | Level 2 (C3PAO) | |
|---|---|---|---|
| Protects | Federal Contract Information | Controlled Unclassified Information | Controlled Unclassified Information |
| Requirements | 15, FAR 52.204-21 | 110, NIST SP 800-171 Rev 2 | 110, NIST SP 800-171 Rev 2 |
| Assessed by | Your organization, every year | Your organization, every 3 years, with annual affirmation | Authorized third-party assessor |
| POA&Ms | Not permitted | Limited, closed within 180 days | Limited, closed within 180 days |
| Status | In effect | In effect | Paused since July 13, 2026 |
Coming next
Expanding our services for businesses and clinics
Our federal work comes first. We are also building two divisions that bring the same security discipline to the private sector.
- Fractional CISO, Managed Cybersecurity, IT and Compliance for small businesses, federal contractors and regulated organizations
- Healthcare Practice Technology and Compliance for clinics, with coordinated EHR, IT, HIPAA security support, websites, and access to licensed legal and compliance professionals
Why Mission Project Cyber
Owner-led work
Our founder leads every engagement directly.
Defense program experience
Military leadership, DoD IT and communications experience, F-35 program management and ISSO work.
Right-sized scope
We tell you which requirements apply to you and which do not.
Review-ready deliverables
Documentation written for assessors, auditors and prime contractors.
Leadership
Ricardo Ruiz Carrasquillo
Owner and Managing Member
Medically retired U.S. Army Sergeant First Class with experience in military leadership, Department of Defense IT and communications, F-35 program management, and senior cybersecurity and ISSO roles.
Tell us what you are working on.
A solicitation, a CMMC deadline from a prime, a new clinic, or a board asking about cyber risk. We reply within one business day.
rzric1@missionprojectcyber.com · (515) 992-9237 · Aledo, Texas
NAICS 541512 · 541519 · 541611 · 518210 · UEI YZ2WKF9G3B69 · CAGE 17UC4
Mission Project Cyber provides cybersecurity consulting and readiness services. We do not issue CMMC certifications or government authorizations, and we do not provide legal advice.