GRC Program Support
Develop and operate governance, risk, and compliance programs with control development, policy support, gap assessments, evidence organization, and ongoing program delivery.
Build a more defensible approach to NERC compliance with expert-led assessments, governance support, control development, evidence preparation, and ongoing advisory. DeepSeas helps organizations understand applicable requirements, identify gaps, strengthen security programs, and prepare for regulatory scrutiny with practical guidance grounded in nearly 30 years of cyber defense experience and support for complex enterprise environments.
Practical consulting support for NERC readiness, governance, risk assessment, evidence, and ongoing security program improvement.
Develop and operate governance, risk, and compliance programs with control development, policy support, gap assessments, evidence organization, and ongoing program delivery.
Prepare for regulatory, customer, or insurance requirements through current-state assessments, documentation development, evidence preparation, readiness reviews, and remediation guidance.
Identify strengths, weaknesses, and prioritized risks through stakeholder interviews, asset inventory development, risk workshops, treatment planning, and formal reporting.
Build a scalable security program covering governance, policies, controls, metrics, decision rights, operating cadence, and continuous improvement aligned with organizational risk.
Receive senior security leadership for governance, executive reporting, risk management, compliance requirements, strategic planning, and security program oversight.
Get experienced counsel for consequential security decisions, including program direction, board discussions, insurer reviews, acquisitions, and organizational transformation.
NERC compliance requires more than policies stored in a folder. DeepSeas helps connect requirements to operational controls, accountable owners, evidence, risk decisions, and improvement plans. Its practitioners bring governance, risk, compliance, advisory, and cybersecurity experience to organizations that need a clearer path from current-state gaps to defensible program outcomes. Support can be focused or integrated with broader security operations.
See how expert-led governance and security support can turn compliance requirements into measurable operational improvements.
"DeepSeas data security experts are top notch. They have helped us to improve our cybersecurity posture through risk assessments, penetration testing, and the development of a Data Governance Strategy. They are an invaluable partner."
DeepSeas combines cybersecurity operations, governance expertise, and strategic guidance for practical compliance outcomes.
Nearly 30 years of cyber defense experience supports practical guidance for complex security and compliance challenges.
Hands-on specialists connect compliance requirements with operational controls, evidence, risk, and security improvement.
Governance, risk, compliance, advisory, testing, and managed security capabilities can work together through one partner.
Programs emphasize clearer priorities, stronger evidence, fewer surprises, and security improvements leadership can review.
Experienced cybersecurity leaders and compliance practitioners support complex organizational needs.
Chief Executive Officer
Lewie Dunsworth serves as Chief Executive Officer of DeepSeas, leading the company's mission to make cybersecurity a strategic advantage for nearly 1,000 organizations worldwide. Under his leadership, DeepSeas has grown into a recognized leader in Managed Detection and Response, earning recognition from Gartner and Frost & Sullivan as a top provider in the industry. Lewie drives the company's vision across its six-layer cyber defense stack, spanning strategic advisory, offensive security, threat intelligence, managed detection and response, the CyberFusion SOC, and governance, risk and compliance. He is committed to ensuring that enterprise, mid-market, government, and education clients receive proactive, measurable, and customized cybersecurity outcomes. Lewie's leadership reflects nearly three decades of industry experience and a steadfast focus on client trust and operational excellence.
CISM, CIPP/E, SANS GCIH, GIAC, HITRUST
Keith Robertson brings 25 years of governance, risk management, and compliance experience to DeepSeas, including prior service as a Fortune 500 Chief Security Officer and Enterprise Risk Officer. He holds an impressive array of certifications, including CISM, CIPP/E, SANS GCIH, GIAC, and HITRUST, reflecting his comprehensive expertise across security management, privacy, incident handling, and healthcare compliance. Keith's executive-level experience gives him a unique perspective on enterprise risk, allowing him to help DeepSeas clients align cybersecurity strategy with broader business objectives. His background in high-stakes corporate security leadership positions him well to guide organizations through complex governance challenges and regulatory requirements. Keith is committed to helping clients build mature, enterprise-grade risk management programs that support long-term security and compliance success across diverse industries.
CISSP, CCSK, Licensed Attorney
Sean Duffy combines 25 years of cybersecurity experience with a unique legal background, holding both CISSP and CCSK certifications as well as a license to practice law. A United States Navy veteran, Sean brings a disciplined, mission-focused approach to his work advising C-suite executives and boards of directors on cybersecurity strategy and risk. His legal expertise allows him to provide clients with a nuanced understanding of regulatory and liability considerations alongside technical security guidance, a combination that is especially valuable for organizations navigating complex compliance landscapes. Sean's extensive advisory experience makes him a trusted voice for senior leadership teams seeking to understand cybersecurity risk in business terms. His military background and legal training reflect the depth and diversity of expertise that defines the DeepSeas team.
CISSP, HITRUST
Matt Lammers is an experienced CISO and IT risk executive who brings both deep technical certification and management consulting experience to DeepSeas. Holding CISSP and HITRUST credentials, Matt has built a career helping organizations strengthen their cybersecurity posture while managing enterprise-level risk. His consulting background equips him with strong skills in translating complex security concepts into actionable business strategies for executive stakeholders. Matt's international perspective, including his status as an Australia permanent resident, gives him valuable insight into global compliance and security considerations that benefit DeepSeas clients operating across borders. He is dedicated to helping organizations build resilient, well-governed cybersecurity programs that align with both operational needs and executive priorities, reinforcing DeepSeas' commitment to customized, outcome-driven security solutions.
The North American Electric Reliability Corporation, commonly known as NERC, develops and enforces reliability standards intended to support the dependable operation of the bulk power system. NERC-related compliance helps applicable organizations establish governance, security controls, risk management practices, documentation, and evidence that demonstrate how required protections are implemented and maintained.
Talk with DeepSeas experts about your requirements, risks, and readiness goals.
Held by DeepSeas specialists.
Recognized as a top 40 Managed Detection and Response provider.
Recognized as a Leader and top-five provider.
Best Practices Competitive Strategy Leadership Award for Managed Detection and Response.
Award recognition for Managed Detection and Response strategy.
Share your NERC compliance goals and receive guidance on practical next steps.
To help us assist you faster, please include the reason for your message so the relevant team can reach out as soon as possible.
To help us assist you faster, please include the reason for your message so the relevant team can reach out as soon as possible.