Institutions and the vendors who sell to them. Environments that clear a HECVAT, hold up to a Department of Education audit, and keep a CUI research award from reshaping the whole campus.
Institutions send a HECVAT before they buy, and the infrastructure and hosting sections carry most of the questions. Vendors who cannot answer them from a live environment wait while procurement stalls behind the questionnaire.
Student records fall under FERPA, financial aid data pulls in GLBA, a medical school adds HIPAA, and a federally funded research award can bring NIST 800-171 onto the same network as everything else.
A single CUI award carries DFARS obligations onto a campus whose central IT was designed for open collaboration, and the award has a start date either way.
We do federal compliance work and higher education work with the same people, which is what a research security problem calls for.
Hosting, access control, logging, encryption, and continuity built so the infrastructure sections answer themselves. We complete those sections from your live environment and keep the answers current as it changes.
CUI research environments built to the same standard as our federal work, separated from general campus infrastructure. A new award lands in a ready enclave instead of triggering a re-architecture.
FERPA access control, audit logging, retention and deletion, and the GLBA Safeguards implementation a Department of Education audit examines. Evidence collected as the environment runs.
TX-RAMP and StateRAMP environments for vendors selling into public institutions, mapped from the same control implementation as the federal baselines.
We design and evidence the environment. Certification and authorization stay with you and your assessor.
Control implementation and evidence automation across FedRAMP and FedRAMP 20x, NIST, CMMC, HECVAT, FERPA, TX-RAMP, SOC 2, HIPAA, and GxP standards.
Workload discovery, migration planning and sequencing, database and data movement, and cutover with validation.
Multi-account AWS environments for federal, state, and local work, designed against FedRAMP, NIST, and CMMC control sets with evidence collection built in from the start.
Tell us which institutions you sell to, or which awards you are carrying, and we will map what the environment needs.
Start the Conversation