About Us
Regola Cyber builds CMMC Level 2 environments for Defense Industrial Base (DIB) organizations where security and reliability are critical.
We design, set up, and support clearly defined CUI boundaries using strong configurations, mapped controls, and evidence ready for assessment. Whether we deploy PerimeterAlpha, our managed CMMC environment solution, or carry out a formal CMMC assessment, our work is built around one standard: it must withstand scrutiny.
Our team has been involved in the CMMC ecosystem since its early formation and is an authorized C3PAO. We conduct official Level 2 certification assessments and mock assessments, and we engineer secure, defensible environments for organizations preparing for certification.
We believe certification is not a documentation exercise. It is the result of deliberate system architecture, disciplined implementation, and evidence aligned directly to the 110 CMMC Level 2 controls.
Why Us
Regola Cyber was built on federal-scale reference architecture experience, not checklist consulting.
Our leadership team has designed and managed high-assurance General Support System (GSS) architectures for more than 20 information systems in large federal environments. That experience included enterprise SEIM integrations, identity architecture, cloud migrations, and NIST 800-53 ATO support for complex infrastructures.
We apply that same architectural rigor to CMMC.
While some firms start with policies, we begin with system design. We build controls, check configurations, and link evidence directly to assessment goals. This method keeps things clear, prevents extra work, and helps avoid last-minute fixes.
Regola Cyber earned a perfect 110 out of 110 score from the DIBCAC by using our own reference architecture. Our environments are real and have passed federal review.
Since our founding in 2016, we have refined and scaled repeatable architectures that accelerate implementation timelines while maintaining assessment integrity. We know how to structure inheritance from cloud providers, document shared responsibility correctly, and produce objective evidence that holds up during formal review.
Organizations trust and partner with us when contracts, eligibility, and reputation really matter.
Select Experience Examples:
Nathan Regola, Founder
Nathan Regola, Ph.D., J.D. (Principal Consultant) has over fifteen years of experience at architecting complex cloud and “big data” systems, while considering operational, business, and regulatory requirements. He holds a B.S. in Computer Science, an M.S. and Ph.D. in Computer Science and Engineering, all from the University of Notre Dame. While working as a Senior Director and Principal Architect at one of the three largest U.S. prime contractors, Nate earned a J.D. at the George Washington University Law School evening program, where he studied technology and government procurement law. Within the CMMC ecosystem, he is a CCP, CCA, and PI, as well as a member of the C3PAO Forum Board and a member of the ESP/CSP sub-committee to the C3PAO Advisory Council.
Dominic Romito, Chief Growth Officer
Dominic Romito brings over fifteen years of experience scaling enterprise technology platforms and driving measurable P&L impact through data-driven, AI-enabled growth strategies. He has led revenue expansion, platform modernization, and go-to-market execution across SaaS and B2B environments. At Regola Cyber, he leads commercial strategy and growth architecture, aligning scalable revenue systems with the company’s assessment-grade CMMC services for the Defense Industrial Base.
Our Values
We are solutions-driven and have an assets-focused outlook.
We know that time is valuable so we are prompt and efficient.
We offer our customers industry-standard best practices and stay current on our technical skills.
We communicate openly and regularly with our colleagues and customers.
We have integrity and do what is right.
We treat everyone with respect and share our knowledge with humility.
Our Services
PerimeterAlpha
We build and manage environments that are ready for assessment and fit real-world CUI workflows. Our three models are a virtual CMMC environment that keeps digital CUI in one secure workspace; A hybrid model with a dedicated physical CUI setup for specific teams and systems; and Enterprise, a unified, company-wide CMMC-compliant setup. Each model comes with secure configurations, clear documentation, logging systems, and evidence prepared for all 110 CMMC Level 2 practices.
Formal CMMC Level 2 Assessments
As an authorized C3PAO, we conduct certification assessments using structured evidence requests, personnel interviews, and system testing across all Level 2 controls.
Mock Assessments
We replicate the formal process to evaluate readiness and identify gaps before contracts or certification timelines are at risk.
