July 13, 2026: the Department of War suspended CMMC Phase II pending a 60-day review — but NIST SP 800-171 obligations still stand. What it means for you
For State & Local Government · Indiana-Based

Cyber compliance without
a cybersecurity department.

Counties, cities, school districts, and utilities are prime ransomware targets with the thinnest security staffing anywhere. Lionfish stands up a real program — assessment, policies, employee training, and the documentation your insurer and your council keep asking for — with the staff you already have.

Your cyber insurance questionnaire is a compliance audit — 80+ questions now, with premiums and coverage riding on the answers.

Service-Disabled Veteran-Owned Cyber AB Accredited Training Provider We train the assessors

Sound familiar?

Big target. Small team. Public scrutiny.

  • !IT is two people and a help desk. Nobody has spare hours to build a security program from scratch — and grant cycles don't fund headcount.
  • !The renewal keeps getting harder. Carriers now verify MFA, backups, and training with evidence — a declined renewal is a budget crisis.
  • !A breach is front-page news. Public entities answer to residents and councils; 'we had no program' is not a survivable headline.

With Lionfish

  • Right-sized, standards-based. Programs built on NIST CSF 2.0 and the CIS Controls — the baselines carriers and auditors recognize.
  • Training your staff will finish. 52 awareness modules — including music-based training people actually complete — tracked per employee.
  • Indiana-based, veteran-owned. An SDVOSB partner with Purdue CERIAS ties and university partnerships across the state — we speak public sector.

How it works

Know. Fix. Prove.

Know

Know where you stand. A plain-English assessment against NIST CSF and CIS baselines — your real posture, not a vendor scare report.

Fix

Fix the essentials first. MFA, backups, policies, and training — the safeguards that stop common attacks and satisfy carriers, at municipal budget scale.

Prove

Prove it to whoever asks. Insurer questionnaires, audit requests, and council updates answered from one documented program.

The Public-Sector Readiness Briefing — free

Thirty minutes. Straight answers.

Thirty minutes with a practitioner. You leave knowing your biggest risks, your insurance-readiness gaps, and your next move — even if you never hire Lionfish.

Get in touch

Find out where your organization stands

Tell us about your contracts and your timeline. We reply within one business day — and you leave the briefing with answers either way.

  • 1We reply within one business day — usually faster.
  • 2A 30-minute call with someone who can actually answer your questions.
  • 3A straight recommendation — even if it's that you don't need us yet.

Prefer to skip the form? Book a time directly or call 1-877-732-6772. Information you submit is handled per our Privacy Policy.

Find Out Where I Stand