Peak InfoSec was formed in 2016 by our CEO, who had previously been a Program Manager for the Air Force.

Our clientele has called on Peak InfoSec to solve their hardest problems due to our CEO’s mega system design and architecture experiences for the Air Force.

Peak InfoSec has supported the Defense Industrial Base since its inception when our first client worked through NIST SP 800-53 compliance to the original version of DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting.

When the Department of Defense began developing the Cybersecurity Maturity Model, our leaders were immediately involved. Matt began positioning Peak InfoSec as a CMMC third-party Assessment Organization (C3PAO). He served on the CMMC-Accreditation Body (AB) Standards Industry Working group, which drafted the CMMC Assessment Guides, which are now published by the DoD.

Meanwhile, Jim was chosen by industry peers to help create the CMMC Accreditation Body (now called The Cyber AB). Once The Cyber AB was created, Jim was elected as one of the founding Directors and became the organization’s treasurer. Jim provided creative, technical, and business support to The Cyber AB as a full-time volunteer for a year, during which time he, among other things, created the Registered Practitioner program, created and taught the industry’s first official CMMC course, and taught DoD’s DCMA DIBCAC team about CMMC assessments.

Matt and Jim met due to their mutual participation in the early days of the CMMC Ecosystem. Nearly five years of collaboration reinforced the synergies between their respective commitments to serving the nation and the CMMC Ecosystem, and their approach to business. In 2025, they decided to join forces, and Jim joined Peak Infosec’s management team as the company’s President and General Counsel.