Cybersecurity and compliance consulting for public and private organizations.
Atlantic Meridian LLC is a minority-owned Nevada small business. We help federal agencies, state and local governments, nonprofits, healthcare and education organizations, and commercial companies assess risk, meet compliance requirements, and strengthen security. Work is principal-led, scoped in writing, and available directly or as a subcontractor to primes.
Core capabilities
Every engagement has defined deliverables in writing. Assessments are usually fixed fee. Longer authorization, compliance, or operations work can be scoped as fixed price or time and materials.
Risk and compliance assessments
NIST CSF 2.0 gap assessments, HIPAA Security Rule risk analysis, SOC 2 readiness, and CMMC / NIST 800-171 readiness for government, healthcare, education, nonprofit, and commercial organizations.SOC, EDR & detection
Detection engineering, alert triage, and SIEM/SOAR and EDR tuning, with automation that reduces noise for analysts.IAM, PAM & Zero Trust
Privileged access design, identity governance, MFA/SSO patterns, and least-privilege programs built to hold up in an audit.Cloud & hybrid security
AWS, Azure, and hybrid security baselines, configuration reviews, and compliance-minded architecture.AI governance & AI-enabled security
AI governance aligned to the NIST AI RMF, plus practical AI-assisted triage and security workflow automation.Services
Fixed-scope packages for government, nonprofit, and commercial buyers.
HIPAA Risk Analysis + NIST CSF 2.0 Gap Assessment
$11,500 small / $23,500 mid-market Fixed fee. Deliverables: risk analysis, gap report, and a prioritized remediation roadmap. We do not perform penetration testing in-house. If you need it, we will help scope it and name any proposed testing partner in writing before work starts.SOC 2 Readiness Sprint
Starting at $12,000 Scoping, control gap assessment, policy set, and evidence plan. Optional NIST AI RMF governance add-on. vCISO from $3,950/mo; growth tier from $6,500/mo.M&A Cyber & IT Due Diligence + 100-Day Integration Plan
Starting at $27,500 per target Two-week assessment for PE firms and acquirers. Optional post-merger integration management.AI Governance
Starter kit $5,500; mid-market $15,500; enterprise from $25,000 AI use policy, risk assessment, and governance framework aligned to NIST AI RMF.Why organizations work with us
Principal-led delivery
The founder is directly involved in scoping, delivery, and review. You know who is doing the work.Framework fluency
RMF, ATO packaging, continuous monitoring, and POA&M discipline for federal work. NIST CSF 2.0, HIPAA, SOC 2, and CMMC for state, local, healthcare, education, nonprofit, and commercial work.Clear, written scope
Statements of work name the deliverables, timeline, and price up front, without open-ended retainers by default.Teaming-ready
Ready to support primes on set-aside and full-and-open work. We do not claim contract vehicles or certifications we do not hold.Leadership and team
Derick Osei, Founder and Managing Member
Derick has more than 12 years of cybersecurity and IT experience, working in the field since 2013. In prior roles, his individual experience includes RMF/ATO and compliance support for federal programs and security operations work. He leads every Atlantic Meridian engagement.
- Active Secret clearance (held by Derick individually; Atlantic Meridian LLC does not hold a facility clearance)
Our team
Our team includes CISSP-certified professionals and staff holding other industry certifications.
Experience and past performance
- Founder experience. Proposals describe Derick's individual experience from prior roles, labeled as individual experience and not as company past performance.
- Teaming partners. When a bid calls for more capacity or company references, we team with established firms and cite their references only with their written permission.
- Company record. Atlantic Meridian past performance will be listed here as engagements are completed.
Company data
Facts for market research, sources sought responses, supplier registration, and teaming.
Capability statement
One-page PDF for contracting officers, procurement teams, small business liaisons, and prime capture teams.
Teaming & subcontracting
Open to subcontract roles, teaming agreements, and mentor-protégé discussions where risk and compliance assessments, RMF/ATO, IAM/PAM, or cloud security strengthen a broader bid. Small business liaisons and capture managers are welcome to reach out directly.
Contact
Atlantic Meridian LLCMailing address: 1887 Whitney Mesa Dr #3978
Henderson, NV 89014
702-899-9387
derick@atlanticmeridianco.com