Get systems authorized. Keep them authorized.
RMF and ATO support, FedRAMP, ISSO services, vulnerability and third-party assessments, and cloud security for federal agencies, their prime contractors, and commercial organizations in regulated industries.
Services
Focused work security programs need done right, whether you answer to an Authorizing Official, an auditor or a customer's security review: getting authorized, staying compliant, and closing findings before they become problems.
RMF & ATO Support
Categorization, control implementation, SSP, SAR and POA&M development, assessment support and authorization packages under NIST RMF and SP 800-53.
FedRAMP Readiness & Authorization
Gap analysis, package documentation, 3PAO assessment preparation and continuous monitoring for cloud service offerings.
ISSO / ISSM Services
Day-to-day system security ownership: continuous monitoring, POA&M management, security impact analysis, audit response and Authorizing Official briefings.
Vulnerability & Third-Party Assessments
Vulnerability scanning, validation and remediation tracking, plus end-to-end third-party risk assessments: vendor intake, SOC 2 Type II and ISO 27001 report review, risk ratings and follow-up.
Cloud Security (AWS & Azure)
Secure architecture review, configuration hardening, DevSecOps integration and compliance mapping for cloud workloads.
Frameworks
NIST RMF, NIST SP 800-53, FedRAMP, FISMA, SOC 2, ISO/IEC 27001, HIPAA and PCI DSS.
Who we work with
Federal agencies & prime contractors
ISSO and ISSM coverage, ATO packages, continuous monitoring and FedRAMP support, delivered directly or as a subcontractor on your team.
Regulated & cloud-first companies
Third-party risk programs from vendor intake through SOC 2 Type II and ISO 27001 report review; HIPAA, PCI DSS and ISO 27001 readiness; vulnerability assessments and cloud security reviews; and a clear path to FedRAMP for SaaS and cloud providers that want to sell to government.
Principal-led. Proven in regulated environments.
Gazelle Works is led by Chris Tackie, a security professional with more than ten years in federal and enterprise environments, including eight years as a federal ISSO. The person you meet is the person doing the work.
50+ ATOs supported to authorization · 5 federal agencies supported · FedRAMP package experience · SOC 2 Type II and ISO 27001 third-party reviews
CGRC · CISM · CEH · CNDA · Associate C|CISO · Active Public Trust
Company data
For contracting officers and prime contractors.
UEI: WN96TC2ACBY3 · CAGE: pending assignment
Small Business · Maryland LLC · Active Public Trust
NAICS: 541519 Other Computer Related Services · 541512 Computer Systems Design Services · 541511 Custom Computer Programming Services · 541690 Other Scientific & Technical Consulting
An ATO deadline, an audit coming, or a security gap?
Agencies, primes and commercial teams: send the requirement, the system or the opportunity. You'll hear back within one business day.
contracts@gazelleworksllc.com · (443) 760-0926 · North Potomac, Maryland