G2 Commercial Practice
Commercial Home Implementation Training Consulting About Our Commercial Team

About Us




G2’s commercial practice has 13 year history in performing cybersecurity assessments and assisting supporting national security initiatives throughout the Federal Government. Through our strong cybersecurity expertise and experiences assisting NIST in other initiatives such as the development and maintenance of Security Content Automation Protocol (SCAP), G2 was selected by NIST as the primary contractor in the development of the Cybersecurity Framework. G2 assisted NIST in reviewing information received through the Request For Information (RFI) and Request for Comment (RFC) process. We also assisted in the execution and facilitation of the workshops that led to the development of the Cybersecurity Framework.

G2 remains engaged with NIST as the primary contract assisting in developing an ecosystem to sustain and nourish future development of the Cybersecurity Framework.

G2’s leadership team is ready and available to discuss your cybersecurity needs and get started in identifying ways to help improve your cybersecurity program to protect against the ever changing threats in our environment.

Mr. Tom Conkle is the Commercial services lead at G2 and a Security Engineer with over 15 years of information assurance experience. Tom focuses on assisting companies within the critical infrastructure sector in using the Cybersecurity Framework to improve their cybersecurity programs. Tom is the co-author of ISACA’s guide for Implementing the NIST Cybersecurity Framework. This book provides organization specific guidance for using the Cybersecurity Framework. Tom’s background also includes supporting security control and vulnerability assessments, information system security engineering activities, and performing security risk assessments. Tom assisted a leading intelligence agency in transitioning to the NIST Risk Management Framework (RMF) and implementing a security control review process for NIST SP 800-53 security controls. You can contact Tom at 301-575-5139 or This e-mail address is being protected from spambots. You need JavaScript enabled to view it


Mr. Greg Witte is a Framework SME and a Senior Security Engineer for G2. He supports Federal and commercial clients, primarily the NIST Computer Security Division. He has been managing information technology for over thirty years, twenty of that in the information security arena. As part of his NIST support role, Greg was one of several primary authors of the NIST Cybersecurity Framework and co-wrote ISACA’s guide for governance and management of enterprise IT through the Cybersecurity Framework.





Mr. Matthew Smith is a cybersecurity Framework SME. After graduating with a systems and information engineering degree from the University of Virginia, Matthew turned his focus towards cybersecurity. Matthew has worked for many federal agencies utilizing many skills such as: software engineering, systems engineering, security engineering, and advanced data analysis. For the last 2 years Matthew has been working with the Computer Security Division at the National Institute of Standards and Technology (NIST) to develop the Framework to Improve Critical Infrastructure Cybersecurity, serving as one of the main authors and technical lead.


G2 is also a proud founding sponsor of CForum. CForum is an online community hosted by a not-for-profit organization dedicated at working together to assist in cybersecurity improvement. Working a community to share best practices and lessons learned through the common language established by the Cybersecurity Framework we can overcome challenges currently faced when implementing a cybersecurity program. To learn more please visit, Cyber.securityFramework.org.