BAI Information Security
BAI Information Security, founded in 1974 and now operating under ALCA IT Solutions, delivers live instructor-led Risk Management Framework training, RMF consulting, and the RDRP certification to the DoD, federal agencies, and defense contractors, supported by a proprietary eMASS training simulator.
- Company typePrivate
- Founded1974
- HeadquartersRadford, United States
- Headcount11–50
- GTM typeB2B
- OfferingServices
What BAI Information Security does
BAI Information Security, founded in 1974 by Lon J. Berman and headquartered in Radford, Virginia, is the original and longest-running provider of Risk Management Framework (RMF) training and consulting for the U.S. Department of Defense, federal civilian agencies, and the defense industrial base. The company delivers a structured curriculum of live, instructor-led courses — anchored by the 5-day flagship RMF for DoD IT + eMASS program and supported by workshops on security controls, STIGs, ISCM, FedRAMP/cloud, CSF 2.0, and RMF project management — plus RMF consulting (GAP Analysis, Document Creation, Secure Configuration) and the Registered DoD RMF Practitioner (RDRP) certification.
Underlying technology is modest and purpose-built rather than platform-scale: live Zoom-based instruction for online delivery, a proprietary eMASS eXPERIENCE Simulator that mirrors the DISA eMASS interface for hands-on training without a CAC, and a content marketing presence via rmf.org. Pricing is per-participant and tiered by course length ($850 single-day workshops up to $2,995 for the 5-day flagship), with enterprise team training for 10+ students delivered onsite or online.
Commercially, BAI operates a sales-led model: customers register via the website, email [email protected], or call 800-763-1903, and outreach to enterprise customers (DoD agencies, federal civilian agencies, defense primes) is driven by brand reputation, content, and direct sales rather than paid acquisition. In May 2024 the company was acquired by ALCA IT Solutions, Inc., a Service-Disabled Veteran-Owned Small Business, and now operates as BAI Cyber within the ALCA umbrella while preserving the BAI brand and curriculum. Per its own disclosures, BAI has trained 15,000+ professionals across 500+ organizations and reports a 98% student satisfaction rate.
BAI Information Security firmographics
Firmographics- Name
- BAI Information Security
- Legal name
- BAI Information Security
- Website
- https://rmf.org
- Company type
- Private
- Founded year
- 1974
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- BAI Information Security, founded in 1974 and now operating under ALCA IT Solutions, delivers live instructor-led Risk Management Framework training, RMF consulting, and the RDRP certification to the DoD, federal agencies, and defense contractors, supported by a proprietary eMASS training simulator.
- Ownership category
- akta.pro rank
BAI Information Security industry classification
Industry- Product category
- Cybersecurity Training and Consulting
- NAICS
- Computer Training (611420), Other Computer Related Services (541519)
- SIC
- Services-Engineering, Accounting, Research, Management (8700)
- akta.pro primary industry
- Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing) (EDABAFAF)
- akta.pro secondary industries
- Security Risk Assessment, Auditing & Security Consulting Training (BPAKAOAH), Cybersecurity Awareness & Digital Safety Training for Security Personnel (BPAKAOAO), Data Protection, Privacy & Information Handling (PII/PHI/PCI) Training (EDABAGAD)
Keywords
Where BAI Information Security is headquartered
LocationHeadquarters
- HQ city
- Radford
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
BAI Information Security business model
Business model- GTM type
- B2B
- Offering type
- Services
- Cost components
- Personnel, Operations, Technology or R&D, Marketing or Sales
Revenue model
- Training Courses: Revenue generated from instructor-led training courses delivered online and onsite. Courses are priced per program with durations ranging from 1 to 5 days. CPEs/CEUs are offered for course completion.
- RDRP Certification: The company offers the Registered DoD RMF Practitioner (RDRP) certification, created as the industry's first dedicated credential for RMF competency.
- RMF Consulting Services: Consulting services to assist organizations with RMF implementation to achieve Authority to Operate (ATO), including GAP Analysis, Document Creation, and Secure Configuration services.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| One time/ perpetual license | Pay-as-you-go | RMF for DoD IT + eMASS - Flagship 5-day comprehensive training |
| One time/ perpetual license | Pay-as-you-go | RMF for DoD IT - 4-day foundational course |
| One time/ perpetual license | Pay-as-you-go | eMASS eSSENTIALS - 1-day hands-on eMASS training |
| One time/ perpetual license | Pay-as-you-go | Security Controls Implementation & Assessment Workshop - 4-day advanced course |
| One time/ perpetual license | Pay-as-you-go | Security Controls Assessment Workshop - 2-day assessment-focused course |
| One time/ perpetual license | Pay-as-you-go | STIG 101 - 1-day STIG implementation workshop |
| One time/ perpetual license | Pay-as-you-go | Single-day workshops (ISCM, RMF in the Cloud, RMF for DoD IT Management, NIST CSF 2.0, RMF Project Management Advantage) |
Go-to-market motion1 record
Distribution channels3 records
Marketing channels4 records
BAI Information Security product offering
Product offeringCore offering
BAI Information Security delivers instructor-led training courses and consulting services focused on the NIST Risk Management Framework (RMF) for Department of Defense IT systems and federal agencies. Offerings include a flagship 5-day RMF for DoD IT + eMASS program, hands-on eMASS eSSENTIALS using a proprietary simulator, Security Controls workshops, STIG, ISCM, FedRAMP, NIST CSF, and RMF project management courses, alongside consulting services for GAP Analysis, Document Creation, and Secure Configuration to help organizations achieve Authority to Operate (ATO).
Product overview
BAI Information Security offers instructor-led RMF training programs and consulting services for the Department of Defense, Federal Agencies, and the defense industrial base. The core offerings include the flagship RMF for DoD IT + eMASS 5-day training program, the eMASS eSSENTIALS course with proprietary eXPERIENCE Simulator, Security Controls Implementation & Assessment Workshop, Security Controls Assessment Workshop, STIG 101, ISCM Workshop, RMF in the Cloud/FedRAMP, RMF Project Management Advantage, and NIST CSF 2.0 workshop. The company also provides RMF consulting services (GAP Analysis, Document Creation, Secure Configuration) and awards the Registered DoD RMF Practitioner (RDRP) certification. Training is delivered live and instructor-led, available online and onsite at select locations. BAI was acquired by ALCA IT Solutions in May 2024.
Differentiator
Problem solved
Functional benefit
Quantifiable outcome
- 15,000+ cybersecurity professionals trained
- +3 more outcomes
Companies that use BAI Information Security
Customer profileNamed customers11 records
Segments3 records
Ideal customer profiles3 records
BAI Information Security technology and API
TechnologyTechnology focussed No
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
Feature1 record
BAI Information Security partnerships and signals
Strategic signalPartnerships
One partnership is on record.
- ALCA IT SolutionscoreIn May 2024, BAI Information Security was acquired by ALCA IT Solutions, Inc., a Service-Disabled Veteran-Owned Small Business (SDVOSB) led by President & CEO Alphonso M. Brown. The acquisition expanded BAI's reach and capabilities while preserving the same commitment to excellence in RMF training and consulting. ALCA IT Solutions is now the parent company powering BAI Cyber training programs. The combined organization delivers an even broader range of cybersecurity services to the DoD, federal agencies, and the defense industrial base.
Scale indicators6 records
Recent moves11 records
Expansion highlights5 records
BAI Information Security competitors and assessment
Company assessmentDirect peers
- SANS Institute: SANS is the dominant global cybersecurity training and certification provider, offering live and online courses across defensive, offensive, and GRC topics. It is the most directly comparable competitor to BAI in instructor-led cyber training, although BAI specializes more narrowly in DoD RMF.
- Infosec Institute: Infosec Institute is a cybersecurity training provider offering live bootcamps, online courses, and certification prep across security operations, compliance, and governance tracks. It is a direct peer in delivering structured cybersecurity skills training to enterprise and government buyers.
- Cybrary: Cybrary is an online cybersecurity training platform with on-demand courses and practice exams covering compliance, GRC, and DoD 8570/8140 baselines. It competes with BAI for the same federal and defense-aligned practitioner audience, albeit via a lower-cost, self-serve model.
- OffSec: OffSec (Offensive Security) is a cybersecurity training and certification company known for OSCP and other hands-on credentials, with courses spanning red team, blue team, and security operations. It is a direct peer in practitioner-oriented cybersecurity certification training.
- Linchpin IT Solutions: Linchpin IT Solutions provides RMF, cybersecurity, and IT consulting services to federal and defense clients, including ATO support and compliance work. It is a direct peer to BAI's consulting practice and competes for the same DoD and federal civilian RMF engagements.
- Electrosoft Services: Electrosoft delivers cybersecurity, RMF, identity management, and IT modernization services to federal civilian and defense customers. It is a direct peer to BAI in the DoD/federal RMF services market, particularly in consulting adjacent to BAI's GAP Analysis and Document Creation offerings.
Broad incumbents
- ISC2: ISC2 is the credentialing body for CISSP, CGRC (formerly CAP), and related certifications and operates training, exam prep, and continuing-education programs. It is a broad incumbent whose CGRC credential overlaps with BAI's RDRP certification.
- Global Knowledge: Global Knowledge is a broad IT and cybersecurity training provider serving enterprises with instructor-led and virtual courses. It is a broad incumbent competing for the same corporate and government training budgets as BAI, although it does not specialize in DoD RMF.
- Learning Tree International: Learning Tree is an established IT and professional skills training company offering instructor-led courses across cyber, cloud, and project management. It is a broad incumbent in the same training delivery model that BAI uses, though with a wider portfolio and less DoD specialization.
- Pluralsight: Pluralsight is a technology skills platform with on-demand courses and skill assessments across cloud, IT operations, and security. It is a broad incumbent competing for enterprise cybersecurity training dollars with a digital-first model that contrasts with BAI's live instructor-led delivery.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks7 records
Key highlights7 records
Customer concentration
BAI Information Security social profiles
Digital presenceBAI Information Security compliance and trust
Trust signalCompliance1 record
BAI Information Security financial estimates
Financial estimateRevenue estimate
Valuation estimate
BAI Information Security leadership team
Management profileNumber of profiles
Profiles1 record
BAI Information Security funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
BAI Information Security M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about BAI Information Security
What does BAI Information Security do?
BAI Information Security delivers instructor-led training courses and consulting services focused on the NIST Risk Management Framework (RMF) for Department of Defense IT systems and federal agencies. Offerings include a flagship 5-day RMF for DoD IT + eMASS program, hands-on eMASS eSSENTIALS using a proprietary simulator, Security Controls workshops, STIG, ISCM, FedRAMP, NIST CSF, and RMF project management courses, alongside consulting services for GAP Analysis, Document Creation, and Secure Configuration to help organizations achieve Authority to Operate (ATO).
Is BAI Information Security a public or private company?
BAI Information Security is a private company. It is classified as corporate owned and is currently operating.
When was BAI Information Security founded?
BAI Information Security was founded in 1974. It employs 11 to 50 people.
Where is BAI Information Security based?
BAI Information Security is headquartered in Radford, United States, in the North America region.
How does BAI Information Security make money?
Three revenue lines are on record. Training Courses are the primary driver. The others are RDRP Certification and RMF Consulting Services.
Who are BAI Information Security's main competitors?
Direct peers on record are SANS Institute, Infosec Institute, Cybrary, OffSec, Linchpin IT Solutions and Electrosoft Services. Broad incumbents are ISC2, Global Knowledge, Learning Tree International and Pluralsight.
Does BAI Information Security have an API?
No public API is recorded for BAI Information Security.
What industry is BAI Information Security in?
BAI Information Security's product category is Cybersecurity Training and Consulting. Its primary akta.pro industry code is EDABAFAF, Cybersecurity Technical Skills (Security Engineering, SOC, Pen Testing), with a secondary code of BPAKAOAH, Security Risk Assessment, Auditing & Security Consulting Training. Its NAICS code is 611420 and its SIC code is 8700.