About
Assessment expertise built on extensive federal and industry cybersecurity compliance experience.
ManageIT Security is your trusted CMMC Level 2 Assessment Partner.
Rosalyn Foltz
CISSP, Lead Certified CMMC Assessor
Rosalyn Foltz founded ManageIT Security
Rosalyn brings more than 18 years of cybersecurity, compliance, and assessment experience spanning both the federal government and private sector. She has participated in and led more than 40 CMMC Level 2 assessments, bringing firsthand assessment experience to every engagement.
Her career includes audit work at the U.S. Government Accountability Office, advisory experience at KPMG, assessing systems, networks, applications supporting the U.S. Department of State, third-party security risk management at E*TRADE, CMMC advisory work at Cummins. That breadth of experience — as an auditor, advisor, and cybersecurity practitioner — shapes ManageIT Security's disciplined and practical approach to CMMC assessment.
Rosalyn remains directly involved in client engagements and leads a team of experienced CMMC assessors, combining senior-level oversight with the expertise needed to conduct thorough, consistent assessments.
Depth Beyond CMMC
CMMC is our focus, backed by experience that extends well beyond a single framework. Rosalyn brings 18 years of cybersecurity compliance experience across NIST 800-53, FedRAMP, FISMA, and CMMC environments. Her work has spanned federal agencies and highly regulated industries, including defense, financial services, healthcare, and manufacturing, with experience at the U.S. Government Accountability Office, KPMG, the U.S. Department of State, Cummins, and E*TRADE Financial.
That breadth of experience matters. Security controls do not operate in isolation, and evaluating them requires understanding how people, processes, technology, and evidence work together. Experience across multiple frameworks and complex environments provides the technical depth to evaluate implementation thoroughly, consistently, and against the applicable assessment requirements.
Credentials
- Authorized CMMC Third-Party Assessment Organization (C3PAO)
- Lead Certified CMMC Assessor (LCCA)
- Certified Information Systems Security Professional (CISSP)
- B.S. Management Information Systems, George Mason University
- M.A. Global Affairs, IT Policy concentration, George Mason University
Background
GAO
Federal audits of agency information security programs.
KPMG
Advisory engagements across regulated industries.
U.S. Department of State
ATO Security Assessments (NIST 800-53).
E*TRADE
Enterprise security compliance in financial services.
Cummins
CMMC compliance advisory.
Your trusted CMMC Level 2 Assessment Partner.
Defense industrial base contractors require an assessment partner whose evaluation is definitive and uncompromised. As an authorized C3PAO, ManageIT Security delivers thorough, objective CMMC Level 2 evaluations grounded in strict regulatory standards — giving you, your prime partners, and the DoW complete confidence in your compliance posture.