Services
Security programs built
for how you actually operate.
Every engagement is scoped to your environment. Here’s what I offer and what you get from each.
Gap Assessment
Know where you stand against a framework before you spend a dollar on controls
A structured evaluation of your current security posture against NIST CSF 2.0, ISO 27001, SOC 2, HIPAA, or another applicable framework. Every control is assessed, findings are documented, and you get a prioritized roadmap — not a list of everything wrong with no direction on what matters first.
What you get
Scoped assessment against your chosen framework
Control-by-control findings with evidence notes
Risk register with scored and prioritized findings
Executive summary for leadership or stakeholders
Prioritized remediation roadmap
IAM Governance Assessment
Who has access to what — and whether they should
IAM failures — overprivileged accounts, stale access, missing MFA — are behind a significant share of breaches. I assess your identity program against access control best practices, evaluating MFA coverage, joiner-mover-leaver process, privileged access, and SSO posture across Okta, Microsoft Entra ID, and AWS IAM.
What you get
IAM posture assessment and gap findings
MFA and SSO coverage review
Joiner-mover-leaver process evaluation
Privileged access findings and prioritized recommendations
Ready to start?
Not sure which service fits?
Most engagements start with a gap assessment. If you’re unsure where to begin, that’s the right place to start — it tells you exactly where you are and what matters most.
Get in Touch