Security programs, not security reports.
CMDash Professional Services delivers the compliance and security leadership work behind the dashboard: CMMC Level 2 readiness, AI governance under ISO/IEC 42001, and fractional security leadership for AWS environments. Every engagement is led personally by a CISSP with 18 years of engineering and security leadership — no hand-offs to junior analysts.
- NIST CSF
- CMMC L2
- SOC 2
- ISO 27001
- CIS v8
- PCI DSS
- ISO 42001
- NIST AI RMF
Four ways to start
Free AWS Cloud Security Posture Assessment
An independent read on your AWS security posture, delivered in a two-hour read-only session by a CISSP with 18 years of engineering and security leadership. No agents, no hand-offs, no obligation.
No cost
CMMC Level 2 Readiness Assessment
All 110 NIST SP 800-171 requirements assessed across your AWS and AWS GovCloud (US) environment, delivering the SSP outline, POA&M, and remediation roadmap a C3PAO expects to see.
$28,500
AI Governance Readiness: ISO/IEC 42001 and NIST AI RMF
Your AI workloads on Amazon Bedrock and Amazon SageMaker assessed against ISO/IEC 42001 and the NIST AI Risk Management Framework, delivering a GRC-ready control set and a board briefing.
$18,500
Fractional Security Leadership
Director-level security leadership for AWS-based organizations at roughly 20 hours per month. A program owner who produces the roadmap, policies, risk register, and board reporting, rather than an advisor who recommends them.
$9,500 / month
One practitioner, start to finish
- CISSP with a governance, risk, and compliance specialization
- Active U.S. SECRET clearance
- 18 years leading engineering, product, and security at global communications providers
- Built a complete security and IT program for ~275 employees across four countries after an acquisition
- Hands-on ISO/IEC 27001, ISO/IEC 42001, NIST AI RMF, and CMMC 2.0 implementation experience
- AWS practitioner since 2011 and former AWS Partner Program administrator
Contact
Every engagement is delivered personally by Brian Govanlu, CISSP.
Readiness and advisory, not certification
Engagements are readiness and advisory services; they do not constitute certification, which must be performed by an accredited body.
Any AWS infrastructure costs you incur remain your responsibility and are separate from the engagement fee.
Professional services are separate from the CMDash auditor and assessor directory. How that directory stays neutral is set out in the Independence Covenant.