Marci Womack is a Managing Director in Schellman's Federal Practice overseeing the emerging CMMC assessment program, the established FedRAMP assessment program, and related areas such as StateRAMP, FISMA, and other NIST 800-53 derivatives (IRS 1075, MARS-E, CJIS). Marci also serves as the 3PAO (third party assessment organization) representative on the Federal Secure Cloud Advisory Committee (FSCAC). Prior to joining Schellman as a senior associate, Marci worked as a federal contractor implementing and assessing federal cybersecurity programs, as well as an FFIEC/GLBA security controls assessor and consultant. Marci has over 10 years of information security experience across various industries and holds key certifications, including CISSP, CISA, CEH, and (CMMC) CCA.