Mark Does IT

Service 06 · Richmond, Virginia

Audit & assessment support from a Certified Information Systems Auditor.

Get audit-ready — and have someone in the room who speaks auditor.

Start a project See the work

01Readiness and gap assessments

A clear-eyed look at where you stand against the framework you're being measured on — ISO/IEC 27001, NIST CSF, SOC 2 or CIS Controls — with findings ranked by what actually matters and a remediation plan you can run. No boilerplate; the output is written about your business.

02Evidence, policies and the request list

Control mapping, an evidence inventory, and the policies and procedures you're missing, drafted in plain language. When the engagement starts, I manage the request list, prepare your people for walkthroughs, and help you respond to findings — so the audit is a conversation you're ready for, not an ambush.

03The right distance

I prepare and support you; I don't audit you. Independence is the point of an audit, and keeping it is part of doing this properly.

What you get

  • Readiness or gap assessment against ISO/IEC 27001, NIST CSF, SOC 2 or CIS Controls
  • Control mapping, evidence inventory, and the policies and procedures you're missing
  • Engagement support: walkthrough prep, request-list management, findings and remediation tracking
  • Plain-language reporting your leadership can act on

Proof

Work this service produced.

HiveMind Security — screenshot
Own brand · est. 2021Redesign staged

HiveMind Security

Security, as a swarm — the brand behind the awareness training, and a rebuild that fixed 139 SEO findings.

139 → 0 SEO findings, live site vs. rebuild60 → 7 pages: the bloat gone, every page indexable
 Prep for CISA — screenshot
Own productLive

Prep for CISA

1,000 original exam questions that explain every wrong answer — $17, lifetime, works offline.

1,000 original questions, every option explained150Q / 4h full exam simulator

Questions

Straight answers.

Are you the auditor?
No — I'm on your side of the table. I get you ready and support you through the engagement; the auditor stays independent.
Do we actually need ISO 27001 or SOC 2?
Often the honest answer is "not yet." A readiness assessment tells you how far away you are and what your customers are really asking for, before you commit to a certification.
How long does a readiness assessment take?
It depends on scope, but for a small business it is weeks, not months — and it starts with a short call and a written quote.

Other services: Custom website design · Rapid prototyping for business solutions · Domain management · SEO + AI SEO · SEO + AI SEO · Cybersecurity awareness, education & training · Replit SEO rescue

Have an idea? Let's make it real.

A short call is all it takes to find out what's possible — and how fast.

Start a project Read the FAQ