Service
IT Governance & Compliance
Frameworks that satisfy auditors and protect operations.
Compliance is not a checkbox exercise; it is the foundation of operational resilience. ClearStack builds governance programs that are audit-ready and actually functional.
Frameworks & Services
What I deliver
Policy Development
IT policies, standards, and procedures written in plain language, comprehensive enough to satisfy auditors, clear enough for employees to follow.
SOC 2 Readiness
Gap assessment against SOC 2 Trust Services Criteria, remediation planning, and audit preparation. I work alongside your auditors, not against them.
HIPAA Compliance
Technical and administrative safeguard assessment, risk analysis, and compliance program development for healthcare organizations and their business associates.
PCI-DSS Compliance
Scoping, control assessment, and remediation guidance for organizations that process, store, or transmit cardholder data.
Audit Readiness
Evidence collection frameworks, control testing procedures, and audit trail management. Be ready when auditors show up, not scrambling.
Incident Response Planning
Documented incident response procedures, tabletop exercises, and communication templates. Know what to do before something goes wrong.
I do not believe in compliance theater. Every control I recommend has a clear operational rationale. Every policy I write is designed to be followed, not filed. The goal is a governance program your team can sustain, not one that collapses the moment the consultant leaves.
Fit and pricing
Who this is for: B2B companies at $10M to $30M in revenue. The buyer is the CEO, CFO, or COO.
Pricing starts with the Clarity Audit at $2,500 (fixed fee, 2 to 3 weeks).
How an engagement starts
Every engagement follows the same three steps: a 20-minute fit call, the Clarity Audit ($2,500 fixed fee, 2 to 3 weeks), and a fractional CIO retainer ($9,500 per month) if the audit shows a fit. The audit fee credits toward your first retainer month when you sign within 30 days of the findings presentation.
Start With a Clarity Audit