GRC Program Development
Design and deliver governance, risk, and compliance programs with policies, controls, risk registers, governance structures, and ongoing program support aligned to organizational requirements.
Build a compliance program designed for the scrutiny hedge funds face from investors, auditors, insurers, and regulators. DeepSeas combines governance, risk, and compliance expertise with continuous controls monitoring, evidence organization, risk assessments, audit preparation, and strategic advisory. The result is a practical, measurable program that helps reduce surprises, support informed decisions, and keep compliance work connected to cybersecurity operations.
Practical compliance support spanning governance, risk assessment, audit readiness, control monitoring, and strategic security leadership.
Design and deliver governance, risk, and compliance programs with policies, controls, risk registers, governance structures, and ongoing program support aligned to organizational requirements.
Prepare for audits, certifications, regulatory requirements, and customer reviews through gap assessments, documentation development, evidence organization, readiness reviews, and remediation guidance.
Evaluate assets, threats, vulnerabilities, impacts, and likelihood to create a defensible risk picture with prioritized treatment plans and documented recommendations.
Maintain visibility into control status through continuous monitoring, automated evidence packaging, operational integrations, and reporting that supports audit and executive review.
Organize evidence, map controls, develop required documentation, support audit attendance, and guide post-audit remediation so compliance work remains structured and actionable.
Access experienced guidance for board reporting, insurer reviews, program transformation, governance decisions, and security priorities without relying exclusively on a full-time executive hire.
DeepSeas helps hedge funds build compliance programs that remain useful between assessments, not just during audit preparation. Practitioners support program design, control and policy development, risk assessment, evidence organization, and ongoing monitoring. Operational security data can inform compliance evidence, helping connect actual risk reduction with the documentation investors, auditors, insurers, and customers may request.
See how structured governance, risk, and compliance support can improve readiness and strengthen security decisions.
"DeepSeas allows my team to deliver the compliance needed to stay up-to-date with all of our governing bodies. Furthermore, we are more confident that our staff, faculty, and students are better protected with DeepSeas as a cybersecurity partner. Without a doubt, DeepSeas is worth every dollar spent. This is our..."
"DeepSeas data security experts are top notch. They have helped us to improve our cybersecurity posture through risk assessments, penetration testing, and the development of a Data Governance Strategy. They are an invaluable partner."
DeepSeas connects compliance guidance with practical cybersecurity operations and measurable risk reduction.
Hands-on specialists bring operational experience to governance, risk, compliance, and audit-readiness engagements.
Control monitoring and organized evidence help reduce surprises between assessments and support informed decisions.
Compliance work connects with advisory, detection, offensive security, threat intelligence, and risk capabilities.
DeepSeas brings approximately 30 years of cyber defense experience serving organizations worldwide.
Experienced security, risk, governance, and compliance professionals support each engagement.
Chief Executive Officer
Lewie Dunsworth serves as Chief Executive Officer of DeepSeas, leading the company's mission to make cybersecurity a strategic advantage for nearly 1,000 organizations worldwide. Under his leadership, DeepSeas has grown into a recognized leader in Managed Detection and Response, earning recognition from Gartner and Frost & Sullivan as a top provider in the industry. Lewie drives the company's vision across its six-layer cyber defense stack, spanning strategic advisory, offensive security, threat intelligence, managed detection and response, the CyberFusion SOC, and governance, risk and compliance. He is committed to ensuring that enterprise, mid-market, government, and education clients receive proactive, measurable, and customized cybersecurity outcomes. Lewie's leadership reflects nearly three decades of industry experience and a steadfast focus on client trust and operational excellence.
CISM, CIPP/E, SANS GCIH, GIAC, HITRUST
Keith Robertson brings 25 years of governance, risk management, and compliance experience to DeepSeas, including prior service as a Fortune 500 Chief Security Officer and Enterprise Risk Officer. He holds an impressive array of certifications, including CISM, CIPP/E, SANS GCIH, GIAC, and HITRUST, reflecting his comprehensive expertise across security management, privacy, incident handling, and healthcare compliance. Keith's executive-level experience gives him a unique perspective on enterprise risk, allowing him to help DeepSeas clients align cybersecurity strategy with broader business objectives. His background in high-stakes corporate security leadership positions him well to guide organizations through complex governance challenges and regulatory requirements. Keith is committed to helping clients build mature, enterprise-grade risk management programs that support long-term security and compliance success across diverse industries.
CISSP, CCSK, Licensed Attorney
Sean Duffy combines 25 years of cybersecurity experience with a unique legal background, holding both CISSP and CCSK certifications as well as a license to practice law. A United States Navy veteran, Sean brings a disciplined, mission-focused approach to his work advising C-suite executives and boards of directors on cybersecurity strategy and risk. His legal expertise allows him to provide clients with a nuanced understanding of regulatory and liability considerations alongside technical security guidance, a combination that is especially valuable for organizations navigating complex compliance landscapes. Sean's extensive advisory experience makes him a trusted voice for senior leadership teams seeking to understand cybersecurity risk in business terms. His military background and legal training reflect the depth and diversity of expertise that defines the DeepSeas team.
CISSP, HITRUST
Matt Lammers is an experienced CISO and IT risk executive who brings both deep technical certification and management consulting experience to DeepSeas. Holding CISSP and HITRUST credentials, Matt has built a career helping organizations strengthen their cybersecurity posture while managing enterprise-level risk. His consulting background equips him with strong skills in translating complex security concepts into actionable business strategies for executive stakeholders. Matt's international perspective, including his status as an Australia permanent resident, gives him valuable insight into global compliance and security considerations that benefit DeepSeas clients operating across borders. He is dedicated to helping organizations build resilient, well-governed cybersecurity programs that align with both operational needs and executive priorities, reinforcing DeepSeas' commitment to customized, outcome-driven security solutions.
Hedge fund compliance services help organizations design, operate, and improve governance, risk, and compliance programs. Support may include policies and controls, risk assessments, evidence management, continuous controls monitoring, audit preparation, regulatory readiness, and strategic advisory. DeepSeas connects these activities with cybersecurity operations so compliance documentation reflects how controls function in practice rather than existing only as static paperwork.
Talk with DeepSeas specialists about your governance, risk, and audit-readiness priorities.
Certification held by DeepSeas specialists.
Recognition as a top 40 MDR provider by Gartner.
Recognition as a Leader and top-five provider in 2024.
Award for Managed Detection and Response competitive strategy leadership.
Recognition for strategy in global MDR best practices.
Share your current requirements and priorities to discuss a practical path toward better governance, evidence readiness, and risk visibility.
To help us assist you faster, please include the reason for your message so the relevant team can reach out as soon as possible.
To help us assist you faster, please include the reason for your message so the relevant team can reach out as soon as possible.