Security & Cybersecurity Statement
Last updated: November 7, 2026
MYTSWIF Technologies, LLC, provides information technology and cybersecurity services to federal, state, and local government customers — including the Department of Defense (DoD), the Intelligence Community (IC), and local governments in the National Capital Region. Protecting customer data, particularly Federal Contract Information (FCI) and Controlled Unclassified Information (CUI), is a core operational priority.
Compliance Frameworks
-
NIST SP 800-171 Rev 2. MYTSWIF Technologies, L.L.C., implements safeguards to protect FCI and CUI in nonfederal information systems in accordance with NIST SP 800-171 Rev 2, as required by DFARS 252.204-7012.
-
CMMC. MYTSWIF Technologies, L.L.C., maintains its Cybersecurity Maturity Model Certification (CMMC) posture in line with DoD program requirements and applicable contract clauses, including DFARS 252.204-7021 where incorporated. Current status: NIST SP 800-171 Rev 2 compliant; self-assessment current per CMMC Phase I requirements.
-
Risk Management Framework. We support DoD RMF/DIACAP processes for customer systems and apply equivalent discipline to our own environments.
-
CIS Controls & Zero Trust principles guide internal operations, including multi-factor authentication, least-privilege access, continuous monitoring, vulnerability scanning, and automated patch management.
Data Handling
-
FCI and CUI are processed only on authorized, safeguarded information systems. We do not store or transmit CUI through this public website or unapproved channels.
-
Sensitive data is encrypted in transit (TLS) and at rest.
-
Access to sensitive data is limited to personnel with a need to know, enforced through role-based access controls.
Incident Response & Notification
-
We maintain an incident response process with defined roles, escalation paths, and availability for reportable events.
-
In the event of a cyber incident affecting government information or systems, we will notify the appropriate government officials within the timeframes required by DFARS 252.239-7019 (72 hours) and applicable contract terms.
-
To report a security concern about MYTSWIF Technologies, L.L.C., website, services, or deliverables, see our Responsible Disclosure Policy.
Third Parties & Supply Chain
We perform due diligence on third-party service providers, flow down applicable cybersecurity requirements — including DFARS 252.204-7012 and CMMC clauses — to subcontractors, and monitor the security posture of vendors that handle our or our customers' data.