Start a conversation

What happens next

1. 01

   We talk

   Thirty minutes on your objectives, your obligations, and the deadline you are working to.

2. 02

   We scope

   If there is a fit, a written statement of work setting out scope, deliverables, and sequence.

3. 03

   We assess

   Independent examination against the framework, regulation, or contract that applies.

4. 04

   We advise

   A prioritized roadmap, and support while your team or your chosen providers carry it out.

Before you write

Please do not send confidential information through this website until confidentiality terms are in place. A message sent here does not by itself create a confidential or privileged relationship. If the matter is sensitive, say so in general terms and we will put terms in place before any detail is exchanged.

Where we are

Dallas Fort Worth, Texas. Engagements are delivered nationwide, mostly remotely, with on-site work where an engagement requires it.

Response

Written inquiries are answered on the next business day.

Send a written inquiry

Fields marked with an asterisk are required.

Name * Work email * Organization What are you seeking? * Select a serviceSecurity Program Baseline and RoadmapSOC 2 Readiness and AccelerationISO 27001 and ISO 27701 Implementation and Certification ReadinessPCI DSS ReadinessHITRUST and Sector Certification ReadinessPolicy, Standard, and Procedure DevelopmentControl Design and ImplementationSecurity Tooling Strategy and ArchitectureCompliance Platform ReviewAudit Readiness and Auditor LiaisonInternal Audit PartnershipCustomer Assurance and Trust ProgramEnterprise Readiness AccelerationCybersecurity Maturity AssessmentPeriodic Reassessment and Continuous MeasurementCyber Risk QuantificationEnterprise Risk Management Program DesignControl Testing and AssuranceSecurity Metrics and Reporting ProgramBoard and Executive Advisory ReportingSecurity Strategy and Investment PlanningCyber Insurance Readiness and Application SupportRansomware Readiness AssessmentBusiness Continuity and Disaster Recovery AssessmentIncident Response Plan and Playbook DevelopmentTabletop ExercisesPost-Incident Assessment and Root Cause AnalysisRegulatory Technical Control AssessmentPrivacy Program Development and AssessmentPrivacy Regulatory ReadinessFinancial Services Regulatory AssessmentHealthcare Regulatory AssessmentGovernment Contractor ComplianceRegulatory Inquiry and Examination SupportConsulting Expert ServicesExpert Witness ServicesReasonable Security OpinionsLaw Firm Security ProgramContract and Data Protection Agreement ReviewAI Governance Program DevelopmentAI Regulatory Readiness AssessmentAI System Inventory and Use Case Risk ClassificationShadow AI Discovery and GovernanceAI Vendor and Model AssessmentAI Product Security and AssuranceAI Risk Assessment and Ongoing MonitoringProduct Security AssessmentSecure Development Lifecycle AssessmentApplication Architecture Review and Threat ModelingSecure Code ReviewApplication Security Testing ProgramSoftware Supply Chain SecurityIdentity, Authentication, and Authorization ReviewAbuse and Fraud Risk AssessmentCredential Attack Defense ProgramAvailability and Denial of Service ResilienceMulti-Tenant Isolation and Application Data ProtectionAPI Security AssessmentCloud and Infrastructure Security AssessmentPenetration TestingVulnerability Assessment and Management ProgramAdversary Simulation and Red TeamResponsible Disclosure and Bug Bounty Program DesignDeveloper Security Training and Security ChampionsFinancial Crime and Transaction Risk AssessmentThird-Party Risk AssessmentThird-Party Risk Management Program DesignVendor Diligence OperationsCyber Due Diligence for AcquisitionsSell-Side Readiness and Vendor Due DiligencePost-Close Integration AssessmentPortfolio Company Security AssessmentVirtual Chief Information Security OfficerInterim Chief Information Security OfficerFractional Compliance OfficerFractional Privacy Officer and Data Protection OfficerBoard and Director AdvisorySecurity Program ManagementSecurity Organization Design and Talent AdvisorySecurity Awareness Program DevelopmentPhishing and Social Engineering SimulationExecutive and High-Risk Individual ProtectionNot sure yet Which best describes you? Select one Growth-Stage & Startup CompaniesEstablished EnterprisesLaw Firms and Legal DepartmentsSoftware and SaaS Companies Other How can we help? * Please keep it general until confidentiality terms are in place. Send inquiry