Optic Logo  |  Who We Are

Optic Cyber Solutions is a veteran-owned small business headquartered in Maryland, delivering practical, results-driven cybersecurity services.

As a CMMC Registered Practitioner Organization (RPO) and NIST Cybersecurity Framework experts, we don’t just know the requirements, we’ve helped shape them by supporting the National Institute of Standards and Technology (NIST) and actively contributing to the cybersecurity standards community for more than a decade.

Our team draws on years of experience supporting both government and commercial organizations, guiding them through complex compliance landscapes and translating technical mandates into clear, actionable steps that work for their business. We bring deep expertise, proven methodologies, and a commitment to making cybersecurity less overwhelming and more attainable.

 | Why We're Different

We bring experience you won't find everywhere.

We've been on the inside of the standards you're working to meet. Our team has contributed to the development of the NIST Cybersecurity Framework, the creation of the CMMI Cybermaturity Platform, and has been actively involved in the CMMC community since its inception. This gives us a unique perspective on how requirements are shaped and how they can be applied effectively.

We've worked with cybersecurity leaders and practitioners across industries, learning what works in practice, not just on paper. By combining deep knowledge of the requirements with real-world lessons learned, we deliver strategies that are practical, proven, and built to last.

 | Our Credentials


CMMC Registered Practitioner Organization
Veteran-Owned Small Business Enterprise Program Seal
US Small Business Association Veteran-Owned Certified


Contract vehicle:
GSA Highly Adaptive Cybersecurity Services (HACS)
Contract Number: 47QTCA23D00DD
Schedule Title: Multiple Award Schedule (MAS)
Federal Supply Group: Information Technology Services
SIN: 54151HACS, OLM


State Incentive:
Qualified Maryland Cybersecurity Seller
Eligible services qualify for the Maryland cybersecurity state tax credit, helping clients reduce costs while advancing from planning through certification readiness.

 | What We Do

Our mission is to help you protect what is essential to your business by keeping you in control with a cybersecurity culture built around your needs.

Many organizations struggle to turn requirements like CMMC and the NIST Cybersecurity Framework (CSF) into practical action. Competing priorities, unclear guidance, and misaligned efforts can lead to wasted resources, audit findings, or lost contracts.

Optic Cyber Solutions provides strategic services that cut through complexity. We assess your current state, pinpoint the risks and requirements that matter most, and chart a clear path to compliance and resilience. Whether you're just getting started or looking for blind spots, our guidance ensures your CMMC and CSF efforts deliver real security improvements while positioning you to win and retain business.

We help you navigate your cybersecurity requirements with clarity, moving from uncertainty to confidence.

 | Meet Our Leadership

The strength of Optic lies in our experts. Our leadership team brings decades of experience supporting both government agencies and commercial organizations in building and improving cybersecurity programs. We combine deep knowledge of regulatory requirements with practical knowledge to deliver strategies that are effective, efficient, and aligned with business priorities.


Tom Conkle

Tom Conkle

CEO & Cybersecurity Engineer

Tom Conkle, CISSP, is a cybersecurity engineer with over 20 years of experience helping organizations mature and assess their cybersecurity capabilities. Tom has supported the implementation of industry standards such as the NIST Cybersecurity Framework (CSF), CMMC (NIST SP 800-171), FedRAMP/FISMA (NIST SP 800-53), and ISO 27001. As a CMMC Certified Professional (CCP) and a Lead CMMC Certified Assessor (CCA), he specializes in guiding organizations through the preparation process for CMMC assessments. He has also assisted dozens of commercial and governmental organizations in mitigating risks within their cybersecurity programs using the NIST CSF and is the co-author of ISACA's guide for implementing the NIST Cybersecurity Framework. Additionally, as a principal architect of the CMMI Cybermaturity Platform, he developed a self-assessment SaaS tool that helps organizations create risk-informed cybersecurity programs and track their progress.


Kelly Hood

Kelly Hood

EVP & Cybersecurity Engineer

Kelly Hood, CISSP, specializes in helping organizations implement cybersecurity and privacy best practices, controls, and standards to effectively manage risks and achieve compliance objectives. Kelly supports the evolution and outreach of the Cybersecurity Framework (CSF) as part of the NIST Cybersecurity Framework team and continues to aid organizations in adopting the Framework to strengthen their cybersecurity posture. Kelly also supports organizations across industries as a CMMC Certified Assessor (CCA) and Registered Practitioner (RP) by developing and implementing cybersecurity strategies to help manage the risks to their business. Additionally, Kelly supported the development and expansion of ISACA's CMMI Cybermaturity Platform (CMMI-CP). The patented approach she helped develop for ISACA translates cybersecurity risk to cybermaturity goals and identifies mitigation strategies to help organizations improve their cybersecurity capabilities.