David Kirubi — Author of It Takes the Whole Shop · CyberAB Registered Practitioner
David Kirubi is the author of It Takes the Whole Shop: How the Defense Supply Chain Already Knows How to Protect Information (2026), the founding text of Qualified Capacity™ — the operating standard for enduring supplier qualification in the Defense Industrial Base.
A CyberAB Registered Practitioner with 21+ years running $150M–$2B P&Ls and teams up to 9,000. He has delivered 9-figure operating improvements and built a corporate-backed venture to high 7-figure recurring revenue with global-enterprise customers. As an independent sponsor, he has screened 5,000+ platform and bolt-on acquisitions and most recently closed a platform at 8 figures backed by limited partners.
Qualified Capacity™ — the Book, the Diagnostic, the Desk — keeps the discipline portable across shops, primes, and operators.
David Kirubi
For decades, the men and women on the shop floor of the Defense Industrial Base have run the discipline that CMMC formalized. The quality systems were there. The integrated management systems were there. The shop-floor awareness was there. CMMC did not introduce information protection to the supply chain. It named a discipline already living in the shop. David Kirubi wrote It Takes the Whole Shop (2026) because someone had to say that out loud.
His work serves a two-part problem hiding in plain sight: making suppliers eligible to handle the programs that flow down from primes — operationally, contractually, audit-ready — and keeping them eligible through every change a shop will see. The audit cadence that never stops. The standards that revise. The senior tech who retires. The cyber threat that doesn’t. The founder who steps back. The buyer who steps in. Qualification. Continuity. The two halves of Qualified Capacity™ — the same discipline, sustained. The shop owners and quality managers who run quality every day. The primes managing flowdown across a supplier base of hundreds. The owner-founders who built decades of qualified capacity and now have to transfer it without destroying it. The sponsors and operator-investors who see that qualified supplier capacity, once preserved, is the industrial base the country depends on.
Across twenty-one years at General Electric, Johnson Controls, and his consultancy Stanbury & Co., Kirubi has led $150M–$2B P&Ls, teams of nine thousand, and the operating disciplines behind 5,000+ platform and bolt-on M&A assessments — including an 8-figure platform close backed by limited partners. A CyberAB Registered Practitioner, he is CEO of NCA SF067 LLC — an operator-led platform in essential B2B critical-infrastructure services — and a Board Member of the Veterinary Initiative for Endangered Wildlife (VIEW).
Kirubi's professional experience is described in more detail below.
Biography
Book
It Takes the Whole Shop — Qualified Capacity™ Press, 2026
If it’s not qualified, it’s not capacity.™
The book argues that the men and women in the Defense Industrial Base have already been running, for decades, the discipline CMMC formalized. The quality systems were there. The integrated management systems were there. The shop-floor awareness was there. CMMC did not introduce information protection to the supply chain. It named a discipline already living in the shop.
Available in Kindle, paperback, and hardcover on Amazon.
About the publisher
Qualified Capacity™ is the operating standard for enduring supplier qualification in the Defense Industrial Base. The Book, the Diagnostic, and the Desk are the three practitioner-facing surfaces. Visit qualifiedcapacity.com for all three.
If it’s not qualified, it’s not capacity.™
Press & speaking inquiries
For press, podcasts, speaking engagements, and book inquiries, visit the Contact page.
Track Record
21+ Years of Global Operational Leadership and Value Creation
My career has been forged inside world-class organizations, where my track record spans both the leadership of complex, multi-billion-dollar business units and the entrepreneurial drive to build new ventures from the ground up. From managing large-scale global P&Ls to co-founding and scaling a corporate-backed startup at Johnson Controls, my experience is defined by the ability to deliver measurable results in operations of any size. This unique blend of corporate discipline and entrepreneurial agility is the foundation of NCA SF067 LLC, an operator-led platform actively acquiring and building a leading enterprise in the utility and critical infrastructure sector.
Writing & Press
Contact
Public channel. Please do not transmit CUI, FCI, controlled technical data, contracts, drawings, supplier lists, or other sensitive operational details through this form. Controlled exchanges occur through private channels established by separate engagement.