NAICS 541512 · 541511 · 541519 · 541611 · 541690 Size Minority-owned small business Location Henderson, NV SAM Registered · Active
Atlantic Meridian

Cybersecurity and compliance consulting for public and private organizations.

Atlantic Meridian LLC is a minority-owned Nevada small business. We help federal agencies, state and local governments, nonprofits, healthcare and education organizations, and commercial companies assess risk, meet compliance requirements, and strengthen security. Work is principal-led, scoped in writing, and available directly or as a subcontractor to primes.

Capability statement Email 702-899-9387
RMF / ATO NIST CSF 2.0 HIPAA SOC 2 IAM / PAM Cloud security Assessments

Core capabilities

Every engagement has defined deliverables in writing. Assessments are usually fixed fee. Longer authorization, compliance, or operations work can be scoped as fixed price or time and materials.

01 · Authorization

RMF / ATO support

Categorization, control selection, SSP authorship, security control assessment support, POA&M management, continuous monitoring, and ATO package readiness aligned to NIST SP 800-37, 800-53, and 800-171.
02 · Compliance

Risk and compliance assessments

NIST CSF 2.0 gap assessments, HIPAA Security Rule risk analysis, SOC 2 readiness, and CMMC / NIST 800-171 readiness for government, healthcare, education, nonprofit, and commercial organizations.
03 · Operations

SOC, EDR & detection

Detection engineering, alert triage, and SIEM/SOAR and EDR tuning, with automation that reduces noise for analysts.
04 · Identity

IAM, PAM & Zero Trust

Privileged access design, identity governance, MFA/SSO patterns, and least-privilege programs built to hold up in an audit.
05 · Cloud

Cloud & hybrid security

AWS, Azure, and hybrid security baselines, configuration reviews, and compliance-minded architecture.
06 · AI security

AI governance & AI-enabled security

AI governance aligned to the NIST AI RMF, plus practical AI-assisted triage and security workflow automation.

Services

Fixed-scope packages for government, nonprofit, and commercial buyers.

01 · Assessment

HIPAA Risk Analysis + NIST CSF 2.0 Gap Assessment

$11,500 small / $23,500 mid-market Fixed fee. Deliverables: risk analysis, gap report, and a prioritized remediation roadmap. We do not perform penetration testing in-house. If you need it, we will help scope it and name any proposed testing partner in writing before work starts.
02 · Readiness

SOC 2 Readiness Sprint

Starting at $12,000 Scoping, control gap assessment, policy set, and evidence plan. Optional NIST AI RMF governance add-on. vCISO from $3,950/mo; growth tier from $6,500/mo.
03 · Diligence

M&A Cyber & IT Due Diligence + 100-Day Integration Plan

Starting at $27,500 per target Two-week assessment for PE firms and acquirers. Optional post-merger integration management.
04 · Governance

AI Governance

Starter kit $5,500; mid-market $15,500; enterprise from $25,000 AI use policy, risk assessment, and governance framework aligned to NIST AI RMF.
Emerging focus. CMMC / NIST 800-171 self-assessment support, AI governance and ATO for AI systems, and post-quantum cryptography readiness.

Why organizations work with us

Principal-led delivery

The founder is directly involved in scoping, delivery, and review. You know who is doing the work.

Framework fluency

RMF, ATO packaging, continuous monitoring, and POA&M discipline for federal work. NIST CSF 2.0, HIPAA, SOC 2, and CMMC for state, local, healthcare, education, nonprofit, and commercial work.

Clear, written scope

Statements of work name the deliverables, timeline, and price up front, without open-ended retainers by default.

Teaming-ready

Ready to support primes on set-aside and full-and-open work. We do not claim contract vehicles or certifications we do not hold.

Leadership and team

Derick Osei, Founder and Managing Member

Derick has more than 12 years of cybersecurity and IT experience, working in the field since 2013. In prior roles, his individual experience includes RMF/ATO and compliance support for federal programs and security operations work. He leads every Atlantic Meridian engagement.

Our team

Our team includes CISSP-certified professionals and staff holding other industry certifications.

Experience and past performance

Atlantic Meridian LLC was formed in August 2026 and has not yet completed contracts under its own name. We are upfront about that.

Company data

Facts for market research, sources sought responses, supplier registration, and teaming.

Legal name
Atlantic Meridian LLC
State / formed
Nevada · Aug 26, 2026
Entity type
Limited Liability Company
Business size
Minority-owned small business
UEI
KA32TSXE4XK7
CAGE
25VQ8
Primary NAICS
541512 Computer Systems Design Services
Secondary NAICS
541511 · 541519 · 541611 · 541690
Website
atlanticmeridianco.com
SAM status
Active (renews Sep 25, 2027)

Capability statement

One-page PDF for contracting officers, procurement teams, small business liaisons, and prime capture teams.

Teaming & subcontracting

Open to subcontract roles, teaming agreements, and mentor-protégé discussions where risk and compliance assessments, RMF/ATO, IAM/PAM, or cloud security strengthen a broader bid. Small business liaisons and capture managers are welcome to reach out directly.

Contact

Atlantic Meridian LLC
Mailing address: 1887 Whitney Mesa Dr #3978
Henderson, NV 89014
702-899-9387
derick@atlanticmeridianco.com