The operating account
IT strategy and governance, written so the executives who own the operation read one account.
The practice · Based in Utah
Cybersecurity consulting across the U.S.
REKKY first. Mission complete. It's done.
REKKY Sec Ops Consulting is the security and IT operations firm of REKKY Consulting LLC. SOC 2 readiness, ISO 27001 readiness, penetration testing with retest, infrastructure assessment, IT operations, and incident response readiness are on this site. An ongoing fractional DevOps or SRE placement sits with Coalesce Ops.
What REKKY means here
REKKY is a short reconnaissance. We look at the security and IT operation a company already has before anyone adds a tool, a program, or a hire.
The people, the systems, the vendors, and the decisions are one account. A gap in the evidence shows up in the access. A gap in the access shows up in the bill.
You receive what holds, what disagrees, and the order to close it. We write the scope before the work starts. Once you approve it, we'll need access to the right areas and people.
Based in Utah. Serving clients across the U.S. Engagements are remote-first, and on-site travel is available. We work around your normal operations, and we'll need access to the right areas and the right people while we do.
Work this firm takes
An IT security consultant for the operation you run: SOC 2 and PCI, ISO 27001 readiness, penetration testing with retest, identity and access, onboarding and offboarding, the platforms you already pay for, and incident response readiness. AI only on a step people already do.
SOC 2 and PCI
A SOC 2 readiness consultant, with evidence that matches the controls in use.
Identity, platforms, cost
An infrastructure assessment of identity, access, and what the vendor stack costs.
AI on a known step
AI on a step people already do. Not a team hired to watch a model.
ISO 27001 readiness
Evidence that can be produced, owners who can explain the duty, and gaps assigned before an assessment.
Penetration testing
Paths that matter, then a retest after the correction. A finding without a retest stays open.
Incident readiness
A plan, a tabletop, playbooks, and a restore test the people already here can run.
IT operations
Platforms, runbooks, change control, and monitoring, with a name on each gap.
Where the work comes from
Robert Foster, President and CEO, served in the United States Marine Corps. He has directed technology and field teams in medical devices under FDA and ISO requirements, in energy and telecommunications networks, and in security platforms.
Shane Matthew Foster is Vice President and CTO. The firm is a Utah limited liability company based in Pleasant Grove. Serving clients across the U.S. Engagements are remote-first, and on-site travel is available. We work around your normal operations, and we'll need access to the right areas and the right people while we do.
What your team keeps
We leave when your team can run the next week. Procedures, owners, and the record stay with you. We do not leave a system that needs us in the meeting.
An ongoing fractional DevOps or SRE placement is Coalesce Ops. ISO 27001 readiness, penetration testing, and incident response readiness stay on this site.
Contact
Text us. Remote-first across the U.S.
Tell us the security or IT operations problem. Engagements are remote-first across the U.S., and on-site travel is available. We work around your normal operations, and we'll need access to the right areas and the right people while we do.