Rosen BurkeIT service provider profile · Las Cruces, NM

“Compliance program delivery End-to-end management of PCI DSS, SOC 2, ISO 27001, HITRUST, HIPAA, FedRAMP, and CMMC readiness efforts, including gap remediation, evidence collection, and assessor coordination.”

“Regulatory applicability review Analysis of which laws and standards apply to you, such as HIPAA, GDPR, CCPA/CPRA, other state privacy laws, and PCI DSS, and what each requires.”

“Privacy and security control assessments Evaluation of technical and administrative safeguards against frameworks such as the NIST Privacy Framework, NIST SP 800-53, ISO/IEC 27701, and HIPAA Security and Privacy Rules.”

“In security and compliance work the cost is higher: a missed control, a late evidence package, or an unmanaged vendor can delay a certification, a contract award, or a customer deal.”