01
ISO 27001 readiness
Evidence, owners, and gaps before an external assessment.
Services
Security and IT operations services across the U.S.
Six kinds of work, written as an account your team can keep. Scope comes first. We work around your normal operations, and we'll need access to the right areas and the right people while we do.
-
01
One operating account
We write one account of what is open, who has it, and which commitment is at risk. Leadership and the floor read the same account. A new dashboard is not the result.
Open work · Who has it · The commitment at risk
-
02
A person on each duty
We put a name on every duty that can stall the week, including handoffs that belong to no one. That includes access reviews and the person who signs audit evidence.
Named people · Handoffs · Decisions between groups
-
03
Reviews that still matter
We keep the reviews that change the work. A calendar of status updates comes off when it does not change a decision.
Reviews · Escalations · Decisions
-
04
Records that match controls
We bring tools, access, and records into agreement, including what they cost. AI stays on a step people already do. SOC 2 and PCI evidence has to match those records. We replace a system only when the record cannot carry the work.
Tools · Access · Records · AI · SOC 2 · PCI
SOC 2 readiness · ISO 27001 · Infrastructure assessment · IT operations · Cloud cost
-
05
One standard across locations
A company with sites in more than one place gets one standard. What is truly local is written down. A second site does not get a second operation.
Every location · The same standard · What is truly local
-
06
After two companies join
After a merger, an acquisition, a leadership change, or a platform change, we put one way of working and one set of access in place before the old ways harden.
Merger · Acquisition · Leadership change · Platform change
Recon Assessment
Starting at $15,000 plus expenses. Four days on site with your team, then a written report within about two weeks: findings, root causes, prioritized recommendations, a 30/60/90-day roadmap, and where you can avoid adding headcount.
We work around your normal operations, and we'll need access to the right areas and the right people while we do. Every engagement is scoped to your organization. Once you approve it, we'll need access to the right areas and people.
Inquiries Text First Then Call: 801.319.1061. The same offering is on engagements.
Other work on this site
The six services above are the operating account. These pages are the narrower engagements. We work around your normal operations, and we'll need access to the right areas and the right people while we do.
02
Penetration testing
A scoped test and a retest of the same paths.
03
Incident response readiness
Plan, tabletop, playbooks, ransomware, breach, and a restore test.
04
IT operations
Platforms, runbooks, change control, and monitoring.
Contact
Text us. Remote-first across the U.S.
Tell us the security or IT operations problem. Engagements are remote-first across the U.S., and on-site travel is available. We work around your normal operations, and we'll need access to the right areas and the right people while we do.