NIST 800-171 Readiness Sprint
$7,500 flat
3 weeks
All 110 controls assessed, a System Security Plan that matches reality, a POA&M with owners and dates, and an SPRS score you can defend.
See what’s included →What I do
Three offers. Fixed fees. Visible prices.
Compliance work delivered by the person who did it inside the Electric Boat supply chain for 8 years. Scope agreed before anything starts.
AI Governance Package
$6,500 flat
2 weeks
AI system inventory, usage policy, and risk assessment mapped to NIST AI RMF and ISO/IEC 42001, plus EU AI Act applicability analysis.
See what’s included →Fractional Security and Compliance Lead
from $4,000/mo
3-month minimum, then month to month
Senior security ownership without a senior security salary.
See what’s included →Also available: security engineering and advisory
Project-based, quoted per engagement. Delivery and advisory work, not 24/7 managed services.
SIEM deployment and engineering
Production Wazuh deployment, tuned and branded to your environment and integrated with your stack: log source onboarding, detection rule tuning, and alerting, with an optional tuning-and-health retainer after handoff. Directly satisfies the audit-logging (AU) and monitoring (SI) control families in NIST 800-171 and 800-53, so it pairs naturally with the Readiness Sprint.
Incident response readiness
IR plan and playbook development plus facilitated tabletop exercises that double as SOC 2 and ISO 27001 preparedness evidence. Best-effort response support available by retainer with defined scope. (Not a 24/7 monitoring service, and not digital forensics.)
Business continuity and DR planning
BCP and disaster-recovery plan development, RTO and RPO definition, backup-posture assessment, and DR tabletop testing. Planning and advisory only, not an operated backup or recovery service.
Penetration testing is available, delivered through vetted partners.
Not sure where to start?
Twenty minutes, no pitch. Tell me what showed up in your contract and I will tell you what it actually requires.