Selected work

Real security problems. Practical outcomes.

A selection of recent engagements. Client names are withheld to protect confidentiality, and we only publish outcomes we can stand behind.

AI Transformation & Readiness

AI Readiness Assessment for a U.S. Manufacturer

Challenge
A mid-market manufacturer adopted commercial AI tools and cloud-hosted AI applications faster than its governance, ownership and monitoring could keep pace.
Scope
  • NIST AI RMF, 72 controls
  • Evidence maturity scoring
  • EAGLE live AWS scanning
  • Bedrock guardrails
  • MCP connector review
  • AI inventory
  • Policy adoption
  • AI traffic monitoring

Outcome. Replaced a document-count coverage metric with a control-by-control readiness baseline, surfaced critical cloud gaps for immediate remediation and delivered a prioritized roadmap to an AI-ready operating model.

Related service
AI Security & Governance

Enterprise AI Governance & Security

Challenge
Fast adoption of AI agents, SaaS tools, APIs, connectors and cloud/data services created unclear ownership and control gaps.
Scope
  • NIST AI RMF
  • AI inventory
  • Identity and permissions
  • Logging
  • SaaS / MCP / API threat modeling
  • Governance
  • Remediation planning
  • Red-team methodology

Outcome. Established a governance baseline, prioritized material AI risks and created an executable remediation and operating model.

Related service
vCISO

Fractional Security Leadership

Challenge
A growing organization required senior security leadership without adding a full-time executive.
Scope
  • Strategy
  • Policy
  • Incident readiness
  • Risk management
  • Architecture
  • Vendor review
  • Executive reporting

Outcome. Embedded senior cybersecurity leadership into business operations while creating a prioritized roadmap and repeatable governance cadence.

Related service
GRC & Compliance

SOC 2 Readiness Accelerated by Audit CADDIE

Challenge
Manual control and evidence mapping slowed audit preparation.
Scope
  • Readiness
  • Evidence
  • Controls
  • Policies
  • Gap analysis
  • Remediation
  • Audit CADDIE

Outcome. Centralized evidence, exposed control gaps earlier and created a clearer path to auditor review.

Related service
Start a conversation

Have a similar problem?

Tell us where you are stuck. We will help determine whether you need strategy, hands-on execution, specialized expertise, Audit CADDIE, or a combination.