ControlCase LLC
ControlCase LLC is a Cyber AB Marketplace-listed C3PAO and RPO based in Fairfax, VA.
What this provider does
ControlCase LLC is a Cyber AB Marketplace-listed C3PAO based in Fairfax, VA, listed on the marketplace as operating since 2004. The Cyber AB listing names assessment services, audit services, cybersecurity consulting, cybersecurity monitoring & surveillance, governance, risk & compliance, penetration testing & phishing, security awareness and education, security program development, third-party risk management, training, and virtual ciso among the services they offer. We have not independently verified the vendor's own website; the Cyber AB Marketplace listing is the basis of every claim on this page.
Stated affiliations and certifications
What the vendor (or a third party) states about their formal status. Each line is anchored to its source.
What this provider is commonly used for
Formal CMMC Level 2 certification assessments (provider's own scope and authorization should be verified on their own site).
[01]Formal CMMC Level 2 certification assessments under their C3PAO authorization.
[01]Cybersecurity consulting engagements, separate from any certification assessment work.
[01]Independent cybersecurity audits beyond CMMC scope.
[01]Workforce security awareness and training programs.
[01]
Services the vendor claims
- CMMC Level 2 third-party assessments[01]
- Assessment Services[01]
- Audit Services[01]
- Cybersecurity Consulting[01]
- Cybersecurity Monitoring & Surveillance[01]
- Governance, Risk & Compliance[01]
- Penetration Testing & Phishing[01]
- Security Awareness and Education[01]
- Security Program Development[01]
- Third-Party Risk Management[01]
- Training[01]
- Virtual CISO[01]
- One Audit (multi-framework single audit across PCI, ISO 27001, GDPR, HIPAA, SOC 2, NIST 800-53)[03]
- Continuous Compliance platform[03]
- 60+ framework certifications (PCI DSS, ISO 27001, HITRUST, SOC 2, GDPR, HIPAA, FedRAMP, CMMC)[03]
- Compliance Hub self-service portal[03]
Gaps in this record
Facts that could not be confirmed against a public source on the retrieval date. If you can point to an authoritative source for any of these, we'll update the record.
- ·This record is derived from the Cyber AB Marketplace listing. We have not independently verified the vendor's own CMMC page, pricing, or current engagement capacity.
- ·Vendor self-description and detailed service mix are not captured here — see the linked Cyber AB profile for the vendor's own narrative.
- ·We have not independently verified the vendor's own website. Cyber AB Marketplace listing is the basis of every claim on this page.
- ·Vendor pricing, current capacity, and engagement model are not captured here.
- ·ControlCase has acquired CyberNINES (announced 2026). The CyberNINES record in this directory should be cross-referenced; the acquisition may consolidate federal CMMC capability under the ControlCase brand.