Security Risk Assessments
DeepSeas evaluates information security risks through stakeholder interviews, asset inventories, risk workshops, scenario analysis, and documented treatment planning that supports informed business decisions.
DeepSeas helps organizations strengthen governance, identify cybersecurity and operational risks, prepare for audits, and maintain evidence-ready compliance programs. With practitioner-led advisory, risk assessments, control development, continuous monitoring, and strategic security guidance, your organization can replace fragmented compliance work with measurable improvements. Services support enterprises, mid-market companies, healthcare, government, education, and other regulated environments across the US.
Integrated advisory, assessment, governance, and compliance services help organizations identify risk and stay prepared for scrutiny.
DeepSeas evaluates information security risks through stakeholder interviews, asset inventories, risk workshops, scenario analysis, and documented treatment planning that supports informed business decisions.
Build and operate GRC programs with policy and control development, risk governance, gap assessments, continuous controls monitoring, and organized evidence for auditors, insurers, and customers.
Prepare for external audits through control mapping, documentation development, evidence packaging, readiness reviews, audit attendance support, and post-audit remediation consulting.
Establish or transform a scalable security program through baseline assessment, maturity roadmaps, foundational policies, operational capability development, and continuous improvement.
Receive CISO-level guidance for cybersecurity strategy, governance, executive reporting, cyber insurance discussions, compliance requirements, budgets, and long-term security planning.
Test incident response capabilities through tabletop exercises, mock incidents, playbook reviews, coordination assessments, and prioritized recommendations for improving organizational readiness.
DeepSeas connects internal audit, risk, and compliance work to day-to-day security operations. Specialists help identify material risks, develop practical controls, organize evidence, and maintain visibility into changing requirements. The approach supports shorter audit cycles, fewer surprises, and measurable improvement without treating compliance as a once-a-year project. Engagements can align with frameworks including SOC 2, ISO 27001, HIPAA, NIS2, and other stated requirements.
DeepSeas helps organizations turn cybersecurity risk, audit pressure, and compliance requirements into practical action.
"DeepSeas is a pleasure to work with. They produce consistent and outstanding results for us and our program, while being thorough, knowledgeable, and easy to work with. We have not had a finding in a certification/re-certification audit in three years across five ISO standards!"
Expert-led services connect governance, risk, compliance, and operational cybersecurity outcomes.
Nearly 30 years of cyber defense experience supports practical guidance grounded in operational security work.
Controls monitoring and organized evidence help organizations stay prepared between assessments, not only during audits.
Advisory, offensive security, detection, threat intelligence, and GRC capabilities work together across one program.
Prioritized recommendations and documented progress help leaders explain risk reduction to boards, auditors, and insurers.
Experienced cybersecurity, governance, risk, and compliance specialists support complex organizations.
Chief Executive Officer
Lewie Dunsworth serves as Chief Executive Officer of DeepSeas, leading the company's mission to make cybersecurity a strategic advantage for nearly 1,000 organizations worldwide. Under his leadership, DeepSeas has grown into a recognized leader in Managed Detection and Response, earning recognition from Gartner and Frost & Sullivan as a top provider in the industry. Lewie drives the company's vision across its six-layer cyber defense stack, spanning strategic advisory, offensive security, threat intelligence, managed detection and response, the CyberFusion SOC, and governance, risk and compliance. He is committed to ensuring that enterprise, mid-market, government, and education clients receive proactive, measurable, and customized cybersecurity outcomes. Lewie's leadership reflects nearly three decades of industry experience and a steadfast focus on client trust and operational excellence.
CISM, CIPP/E, SANS GCIH, GIAC, HITRUST
Keith Robertson brings 25 years of governance, risk management, and compliance experience to DeepSeas, including prior service as a Fortune 500 Chief Security Officer and Enterprise Risk Officer. He holds an impressive array of certifications, including CISM, CIPP/E, SANS GCIH, GIAC, and HITRUST, reflecting his comprehensive expertise across security management, privacy, incident handling, and healthcare compliance. Keith's executive-level experience gives him a unique perspective on enterprise risk, allowing him to help DeepSeas clients align cybersecurity strategy with broader business objectives. His background in high-stakes corporate security leadership positions him well to guide organizations through complex governance challenges and regulatory requirements. Keith is committed to helping clients build mature, enterprise-grade risk management programs that support long-term security and compliance success across diverse industries.
CISSP, CCSK, Licensed Attorney
Sean Duffy combines 25 years of cybersecurity experience with a unique legal background, holding both CISSP and CCSK certifications as well as a license to practice law. A United States Navy veteran, Sean brings a disciplined, mission-focused approach to his work advising C-suite executives and boards of directors on cybersecurity strategy and risk. His legal expertise allows him to provide clients with a nuanced understanding of regulatory and liability considerations alongside technical security guidance, a combination that is especially valuable for organizations navigating complex compliance landscapes. Sean's extensive advisory experience makes him a trusted voice for senior leadership teams seeking to understand cybersecurity risk in business terms. His military background and legal training reflect the depth and diversity of expertise that defines the DeepSeas team.
CISSP, HITRUST
Matt Lammers is an experienced CISO and IT risk executive who brings both deep technical certification and management consulting experience to DeepSeas. Holding CISSP and HITRUST credentials, Matt has built a career helping organizations strengthen their cybersecurity posture while managing enterprise-level risk. His consulting background equips him with strong skills in translating complex security concepts into actionable business strategies for executive stakeholders. Matt's international perspective, including his status as an Australia permanent resident, gives him valuable insight into global compliance and security considerations that benefit DeepSeas clients operating across borders. He is dedicated to helping organizations build resilient, well-governed cybersecurity programs that align with both operational needs and executive priorities, reinforcing DeepSeas' commitment to customized, outcome-driven security solutions.
These services help organizations evaluate controls, identify and prioritize risk, strengthen governance, prepare evidence, and maintain compliance readiness. DeepSeas supports activities such as cybersecurity risk assessments, policy and control development, gap assessments, continuous controls monitoring, audit preparation, executive reporting, and strategic advisory. The work connects compliance requirements with practical security operations rather than treating audit preparation as a separate annual exercise.
Talk with DeepSeas about your audit, governance, or cybersecurity priorities.
Recognized as a top 40 Managed Detection and Response provider by Gartner.
Recognized as a Leader and top-five provider in the 2024 Frost Radar Global Managed Detection and Response Market.
Received the 2024 Best Practices Competitive Strategy Leadership Award for Managed Detection and Response.
Received the 2024 Global MDR Best Practices Award for Strategy.
Share your audit, risk, or compliance priorities and DeepSeas will help identify a practical path forward.
To help us assist you faster, please include the reason for your message so the relevant team can reach out as soon as possible.
To help us assist you faster, please include the reason for your message so the relevant team can reach out as soon as possible.