inDirectIT Appoints CMMC Expert as Director of Compliance Services

WHITE PLAINS, Md., Nov. 12, 2026 /CourierPR/ -- inDirectIT Inc., a cybersecurity firm that helps defense contractors protect sensitive information and meet federal security requirements, has appointed Alexy Johnson as Director of Compliance Services. A former Cybersecurity Maturity Model Certification (CMMC) Level 2 lead assessor and retired U.S. Air Force veteran, Johnson brings more than 20 years of experience securing information systems and evaluating compliance with federal cybersecurity standards. In his new role, Johnson will spearhead inDirectIT’s internal CMMC program, oversee compliance for the company’s managed services clients, and help lead the company’s CMMC advisory practice. His experience on both sides of the assessment process will help defense contractors implement effective cybersecurity measures and demonstrate that those protections meet federal requirements.

Johnson, who has experience with several federal cybersecurity standards and frameworks, including NIST SP 800-171, which defines safeguards for sensitive government information held by contractors, and NIST SP 800-53, which provides a broader catalog of security controls, also brings expertise in the Federal Risk and Authorization Management Program (FedRAMP), which establishes security requirements for cloud services used by federal agencies.

In his new role, Johnson will help inDirectIT customers navigate the evolving CMMC program, which establishes cybersecurity assessment requirements for companies in the defense supply chain. Although the Pentagon suspended the program's planned second phase in July, applicable self-assessment requirements and existing obligations to protect controlled unclassified information remain in effect.

Johnson's appointment comes as defense contractors face the challenges of implementing and maintaining effective cybersecurity measures in the face of evolving regulatory requirements. His background as a former U.S. Air Force systems administrator and his experience as a CMMC Level 2 lead assessor will be invaluable in helping inDirectIT customers stay compliant and secure.

The appointment of Johnson as Director of Compliance Services underscores inDirectIT's commitment to supporting defense contractors and federal suppliers in their efforts to protect sensitive government information and meet federal security requirements. With his expertise in cybersecurity standards and frameworks, Johnson will help inDirectIT clients build and maintain robust compliance programs that meet and exceed federal standards.