Excentium, Inc

Excentium, Inc

Speciality: Network Penetration Testing

Reston, United States 51 employees
Visit Website View on LinkedIn
[01] About

IT services and cybersecurity firm specializing in penetration testing, vulnerability assessments, and information assurance; 20 employees, $11.1M revenue, founded 2006 in Reston, Virginia; SDVOSB and FedRAMP 3PAO; provides lifecycle cybersecurity solutions with a focus on safe, compliant technology.

Excentium, Inc. is a Service Disabled Veteran-Owned Small Business (SDVOSB) and a FedRAMP accredited 3PAO. We provide lifecycle cybersecurity and compliance services to Federal and Commercial Clients. We pride ourselves on our ability to bridge the gap between technologists and the IA community and are charged with integrating ultra secure components into the System Development Lifecycle (SDLC), thereby driving dynamic project sustainment. Excentium has a strong knowledge of Military Healthcare Systems and has the technical experience necessary to design, develop, test, and engineer, the most innovative cybersecurity capabilities available. We are highly successfully in helping Agencies and Clients, migrate to highly secure cloud infrastructures.
[02] Services
Penetration Testing
Security Control Assessment
Remediation Services
Security Design & Control Implementation
Security Documentation
High Value Asset Assessments
Risk And Vulnerability Assessments
Cyber Hunt
Incident Response
Cybersecurity
IT Operations
HR Modernization
[03] Certifications
Fedramp Accredited 3PAO
ISO 9001:2015

ISO 9001:2015 and Cybersecurity/IT


Origin and Development


ISO 9001:2015 is a quality management system standard developed by the International Organization for Standardization (ISO), a global federation of national standards bodies. However, it's important to clarify that ISO 9001:2015 is not specifically a cybersecurity or IT certification—it's a general quality management standard applicable to any organization regardless of industry. The standard was released in 2015 as the fifth revision of ISO 9001, which was first published in 1987. For cybersecurity specifically, ISO created ISO/IEC 27001, which is the actual information security management system standard.


Industry Value and Importance


ISO 9001:2015 is valued across industries because it demonstrates an organization's commitment to consistent quality management, customer satisfaction, and continuous improvement. When applied to IT and cybersecurity contexts, it helps organizations establish systematic processes for service delivery and quality assurance. However, for cybersecurity-specific certification, organizations typically pursue ISO/IEC 27001, which directly addresses information security controls, risk management, and data protection. Both certifications are internationally recognized and often required for government contracts, enterprise partnerships, and demonstrating due diligence to customers and stakeholders.

ISO/IEC 20000-1:2018
Candidate CMMC C3PAO
[05] Notable Clients
  • Defense Health Agency (DHA)
  • Federal Aviation Administration (FAA)
  • Department of Veterans Affairs (VA)
  • National Oceanic and Atmospheric Administration (NOAA)
  • Department of the Army Training and Doctrine Command