Sponsors and Exhibitors 2025

Diligent’s Federal IT Compliance solution, built on a FedRAMP Moderate and DoD IL-5 authorized platform, offers unparalleled security for US federal contractors and US government and defense organizations. As one of the only GRC software vendors with this level of platform security, Diligent empowers information security, compliance, and internal audit teams to streamline workflows, manage regulatory requirements, and enhance IT risk management. Backed by the most experienced FedRAMP team in the GRC world, this solution delivers advanced capabilities for seamless integration, cross-team collaboration, and actionable insights—driving IT compliance maturity while meeting the stringent demands of federal and defense institutions.

38North Security is a cloud cybersecurity advisory and engineering firm that helps companies meet and sustain compliance across U.S. and global frameworks, including FedRAMP, CMMC, HIPAA, ISO 27001, SOC 2, IRAP (Australia), Canadian Protected B, UK Cyber Essentials, and more. We specialize in helping organizations design and implement audit-ready infrastructure and documentation. Our services are ideal for companies working toward their first attestation or authorization, expanding into regulated markets, or modernizing compliance through automation and engineering. From early-stage readiness to long-term continuous monitoring, 38North builds the foundation for scalable, sustainable compliance.

A-LIGN is the leading cybersecurity compliance partner, trusted by over 5,700 organizations worldwide to navigate the complexities of compliance, audit, and risk. With a tech-enabled delivery model and deep domain expertise, A-LIGN has completed more than 31,000 audits. It is the #1 issuer of SOC 2 reports and a top three FedRAMP assessor. Founded in 2009, A-LIGN delivers high-quality, efficient audits across frameworks including SOC 2, ISO 27001, FedRAMP, CMMC, ISO 42001, PCI, and HITRUST. To learn more, visit: https://www.a-lign.com.

RegScale’s award-winning Continuous Controls Monitoring (CCM) platform streamlines GRC, bridging security, risk, and compliance with extreme automation, seamless data integrations, self-updating paperwork, and intelligent AI. Companies use RegScale to reduce costs, accelerate certifications, integrate compliance into DevSecOps, and enhance risk management.

SMPL-C is the top rated CMMC industry’s AI-enabled Documentation Workflow Engine, turning months of manual work into weeks.

CMMI® Institute is trusted by thousands of high-performing companies worldwide to deliver guidance to build and sustain processes that drive business value and innovation. CMMI (Capability Maturity Model Integration) is a globally recognized performance improvement framework that helps organizations elevate and benchmark their capabilities to deliver high-quality products and services. Backed by decades of proven results, CMMI empowers organizations across industries to achieve measurable outcomes in quality, productivity, and efficiency. Designed with an open architecture, CMMI adapts to emerging challenges and industry-specific needs—enabling the development of tailored extensions like the Medical Device Discovery Appraisal Program, which supports FDA’s Case for Quality initiative.

Insight Assurance provides independent audit and compliance assessments for businesses of all sizes. Our team — led by former Big-4 professionals — delivers clear, objective insights that strengthen security and streamline the audit process. Our mission is simple: cut through compliance complexity so businesses like yours can focus on growth, not checklists. With deep industry expertise and a commitment to excellence, we help organizations navigate complex compliance requirements with confidence. Our meticulous approach ensures that every audit meets the highest standards of accuracy, integrity, and transparency.

Keyfactor brings digital trust to the hyper-connected world by empowering organizations to build and maintain secure, trusted connections across every device, workload, and machine. By simplifying PKI, automating certificate lifecycle management, and enabling crypto-agility, Keyfactor helps organizations move fast to establish digital trust at scale. With Keyfactor, businesses can tackle today’s challenges, like growing certificate volumes, manual processes, and new standards and regulations, while laying the groundwork for a successful transition to post-quantum cryptography. For more, visit keyfactor.com.

wolfSSL now delivers Full Linux FIPS 140-3, enabling the FIPS-validated wolfCrypt module to handle all cryptographic operations within a distribution, including kernel crypto, GnuTLS, libgcrypt, NSS, and OpenSSL. Full BSD support is also available. Stop by our stand to learn more! wolfSSL runs across a wide range of embedded environments, as well as Windows, macOS, and mobile platforms. We enable fast FIPS deployments in as little as 90 days at half the traditional cost and a tenth of the time of going it alone. Come talk with us about the world’s first post-quantum FIPS certification, now in progress!

BiometricUpdate.com is the leading source for breaking news, analysis, and research on the global biometrics market. We deliver exclusive daily coverage via our website and newsletter, providing insights into fingerprint, voice, iris, and facial recognition, as well as emerging technologies like DNA analysis and gait recognition.Our reporting spans biometric and non-biometric identification methods, including behavioral biometrics, identity document verification, and telephone forensics. We cover key applications in national security, mobile identity, and border control, with a strong focus on UN Sustainable Development Goal 16.9 for universal digital identification and the ID4Africa movement. With a global audience of 3 million readers annually, our content serves governments, law enforcement agencies, financial institutions, OEMs, service providers, system integrators, and industry professionals. BiometricUpdate.com remains the go-to resource for staying informed on the latest developments in biometric technology and digital identity solutions.

The Common Criteria Users Forum (CCUF) was founded in 2012 and is a community based around those using the Common Criteria and ISO/IEC 15408 standards. The Common Criteria Users’ Forum mission is to provide a voice and communications channel between the CC community and the CC organizational committees, CC evaluation schemes, and policy makers. To join, go to http://www.ccusersforum.org/.

The Cryptographic Module User Forum (CMUF) mission is to provide a voice and communications channel between the community of UNCLASSIFIED cryptographic module (CM) and UNCLASSIFIED cryptographic algorithm developers, vendors, consultants, test labs and other interested parties, and the various national, international, and multi-lateral organizational committees, schemes, and policy makers. To Join the CMUF contact any CMUF Steering Committee member.

The Connectivity Standards Alliance is the place where industry professionals across the globe come together, paving the way to a world of seamless interaction that is transforming the way we live, work, and play. We believe all objects can work together to enhance our day-to-day experiences, and together we create the standards, tools, and platforms which make this possible.