Arrakis was founded by a service-disabled veteran with 23 years of military service and numerous combat tours in the Middle East and Africa. Before joining Arrakis, the CEO served as CISO for a $6B entity and was responsible for protecting all federally protected information. 

Arrakis is uniquely positioned to provide the trusted advisor consultation services you need at an economical price point. Our personnel normally work closely with the "C" suite, Board of Directors, or senior leaders/management to ensure complete visibility at all levels and reduce the risk profile to the client.



If you would like to be added to our Consultant Directory solution (think of LinkedIn but only for Arrakis) then please email sales(@)arrakisconsulting.com


A video biography of Arrakis

Arrakis is a multi-tiered and multi-talented company that can support your regulatory needs.  Watch a quick AI-generated video on just "some" of what Arrakis can do.

Read further for more details.


Want to hire us? Contact us by filling out this form - Contact Us 


CIO Review Award

click the image to see the CIO article.

We are not the same as other companies.

Not all security companies are created equal, and security is a collaborative effort by all parties. Arrakis can be that trusted partner to help reduce risk and become more compliant.

How we work.

Honor, Integrity, Excellence

Our slogan is "Honor. Integrity. Excellence," and anything less is unacceptable. All of our professionals have undergone extensive background checks to verify their history, ethics, and experience. While virtually anything in life or business can be earned or taken away... honor and integrity can only be retained or discarded at the individual level. Ethics violations are never acceptable, and all our personnel are required to adhere to the highest industry standards of ethics to retain their certifications. When an individual can retain their honor and integrity... doing the best they can at everything they do and at all times... then excellence is a positive outcome.

Centralized Planning, Decentralized Execution

Arrakis creates plans with multiple personnel; however, it executes tasks independently and utilizes multi-talented, self-managing personnel. Because of this, we can run leaner than normal with less useless overhead. In other words, instead of providing 5 people who can each perform 1 task, we deploy 1 person who can perform 5+ tasks. While the one person may appear more expensive, having fewer multitalented clients actually saves money because there are fewer people to compensate.

Semper Gumby

"Always Flexible" - Arrakis can adapt to rapidly changing environments to accommodate client needs. We're here to help you succeed.

We are also bluntly honest and won't always tell you what you want to hear.  The phrase "the customer is always right" is completely incorrect.  If the customer was always right there would be no need for consultants or lawyers.

Our 3-Phase Methodology.

Phase 1 (Assessment)

Phase 1 involves assessing your company to determine gaps. This normally takes 4-6 weeks in duration and results in the following deliverables:

1. A very detailed report from an auditor's point of view, including a section on risk.
2. A high-level PPT out-briefing.
3. A Statement of Work for Phase 2. 

Phase 2 (Remediation)

Based on the findings of Phase 1, Arrakis works with you to remediate the identified gaps that prevent your company from becoming regulatory-compliant. This covers a variety of areas and is based on what we discover, and could take a few weeks to several months. 

At the end of Phase 2 is the actual certification audit, where we stand by your side to help.

Phase 3 (Sustainment)

After successfully passing your audit, we stay on board with you to help ensure you don't backslide into noncompliance. There's nothing worse than spending all that money only to have to spend it all over again due to complacency.

This phase likely continues any managed services you may need help with, as well as outsourcing other roles and responsibilities as your company needs.


Contact us by filling out this form - Contact Us


Our Reporting - Our reporting capabilities are second to none and are quite often used in their published format for consumption by senior managers, executives, and the Board of Directors. Less sensitive reporting is also available, if needed, to provide reports to 3rd parties for compliance or contractual purposes.

Our Certifications - Our personnel are industry trained and certified. Just some of the certifications are CMMC-AB RP/CCA/CCP, Certified NIST Cybersecurity Consultant, Certified AI Professional & Manager, ISO27001, ISO27005, ISO27032, ISO27033, ISO27034, ISO27035, ISO31000, ISO37301, ISO42001, ISO21502, cDPO GDPR & USA, PECB CMMC Foundations, PCI QSA, CIPT, CIPP, OCSP, CISA, CISM, CGEIT, CRISC, CISSP, CCENT, CEH, CCISO, CCNA, CCNP, CCDA, CCSP, A+, Cloud+, CYSA+, Network+, Internetwork+, Server+, Pentest+, Security+, Linux+, Project+, CSIS, CLNP, CIOS, CSSS, CNVP, CSCP, CCAP, PMP, CNA, CNE, CCA, SCP, MCSA, MCSE, CCDP, MCPS, MCPSI, CCA, LPIC-1, CLA, SixSigma, CHFI, and ITILv3. Arrakis also has a SecurityScorecard.com score of "A" and is a CMMC-AB RPO and CMMC L2 Compliant.  Do you need training?  Reach out to us, and we can get you certified.

Our Internet Presence - Our website and any other Internet presence do not collect or store sensitive information. Any dealings with federally protected information are conducted entirely on our customers' equipment or technology, and Arrakis assumes no responsibility for its protection. All Arrakis-generated products are trademarked and copyrighted, regardless of whether there is a distinct copyright symbol next to the image.

Benefits of working with Arrakis.

Flexible and intense testing services

Our testing and assessment services are extensive and detailed. Additionally, we will work around your schedule to minimize impact on your organization while still producing the desired results.

Proactive and supportive response from Arrakis personnel

Quite simply, we like positive momentum in our activities. Whatever projects you have that need help, we will be there to assist you. Emergencies are our forte as well, so feel free to call on us for any size or type of situation to ensure your security and safety.

Increased visibility

Our skilled professionals can show you methods and help implement technology to provide far more visibility into your network and security posture than you currently have. At the end of the day, if there is a breach, your visibility into the network and your response to incidents will be questioned. 

Consistent methodology and approach

Regardless of the type of project, we follow a consistent methodology: project kickoff, weekly status reports for any project over two weeks, draft report writing, internal QA of the report, draft review by the client, and final report delivery and closeout. Our methodology offers the most flexibility, and we find it most agreeable to our clients.

We get to know you

We always strive to understand your business fully, so our efforts are not only focused on project success but also on supporting your business goals and helping you find ways to increase revenue or bring in new logos.

Extensive and detailed reporting

The reports from Arrakis are extensive and designed to offer solutions to the problems identified. Our detailed reports follow a simple, consistent format that is understandable to technical and non-technical people alike and are designed to be used as audit evidence from an unbiased third party.

Unbiased and objective advice

Similar to our slogan, "Honor. Integrity. Excellence.", we will offer you an unbiased opinion on the information you need or the possible opinion of an external regulator/auditor on your security posture. Our confidential reports and advice are honest and direct, and specifically designed to convey the concept in the most effective way possible. 

Expansive understanding of regulatory and compliance frameworks

Our professionals have experience with every major framework and are in the loop on upcoming framework changes, so you can stay in the know before it becomes a requirement. Regardless of whether it is CMMC, GDPR, CCPA, NIST, PCI, HIPAA, ISO, COBIT, etc, we can help with all of them.  We can also help you become multi-framework-compliant if you need to merge multiple frameworks.

Expedited delivery of services if needed

To put it simply, sometimes you need to work fast and deliver actionable answers. The world of security isn't slow, and security situations require a fast response from all affected parties. If you are in a bind and need a quick solution, we are here to help.

Transformational and innovative approach to problems

Almost every time, a client will benefit from Arrakis's "thinking outside of the box" viewpoint and from asking "what if" questions to expand options. We don't want to be viewed as just another security company. Arrakis is here to help you succeed.

Experience working with clients of all sizes

Regardless of whether the client is Fortune 100 or 1000, compliance is compliance, and the methodology and solutions remain the same, just on a varying scale. Smaller clients receive the same level of attention and professionalism as larger clients.

Advantages of using experienced and certificated personnel

All of our team members have at least 10 years of experience (some have well over 25), are certified, and are multi-talented across multiple skill sets.  We won't send you someone who can tell you you have a problem without being able to suggest possible solutions to fix it.


If you would like to be added to our Consultant Directory solution (think of LinkedIn but only for Arrakis then please email sales(@)arrakisconsulting.com



Subscribe to our YouTube channel


Benefits of working for Arrakis.

Flexible work environment and hours

We don't care where you live so long as you meet our basic requirements to work with us.  Most work is remote with very rare instances of having to travel.

You will need to ensure -
- Good, reliable, and fast Internet.
- Appropriate work space (no kids, music, loud noise, etc...)
- High resolution webcam
- Usage of the Arrakis background and wearing Arrakis branded clothing for all client interactions
- Understand that every call, every email, every meeting, and every interaction with the client is representing the Arrakis brand and potential sales.

Employee and Company Benefits

We understand that you have to have security for your future and want you to embrace that your support of Arrakis is appreciated.

- 6% matching on 401K (most companies only do 4%) for eligible employees.
- Expense reimbursement where legally allowed.
- Company offsite team bonding event (generally a week long)
- Free access to our practice test platform
- Reduced pricing on certification training
- Compensation increases based on performance

Aggressive Professional Development

In cybersecurity, privacy, and compliance certifications are king and, quite often, more valuable than degrees relating to higher education.

At Arrakis we expect you to advance and diversify your certifications and skillsets.  

Based on your experience and background, we may require you to attend specific higher education institutes. 

Any professional development paid for by Arrakis requires an education reimbursement agreement if departing Arrakis early.


Contact us by filling out this form - Contact Us


Our published work (articles, videos, interviews, etc.)


Arrakis YouTube Channel
- https://www.youtube.com/@arrakisconsulting

Arrakis Playlists


Individual Videos - videos not listed here will be on our YouTube channel.
 - Why Cybersecurity Reviews are Crucial in M&A
 - Understanding Ransomware....protect your business!
 - ISO27001 vs SOC2...which one is better?
 - What Makes ISO 21502 Project Management Training So EFFECTIVE?
 - How to protect your business without breaking the bank
 - Why small businesses need cyber protection now!
 - How ISO 42001 keeps AI security strong in 2025!
 - Why skipping software updates could cost you big!
 - Why cyber criminals want YOUR info!
 - Could failing CMMC cost you big money?
 - Why every project needs cybersecurity now!
 - Shocking ways hackers get inside buildings!
 - Understanding the ISO 27001 Audit Process
 - Can vendor checks save your business?
 - Travel smart - Navigating cybersecurity while on the road
 - The true cost of cyberattacks - Protect your business with Arrakis Consulting!
 - Can your business survive a huge fine?
 - Is your business ready for the new digital rules? DORA!!!
 - PADFA US Data Privacy Law 2024 changes everything
 - Why GDPR compliance can save your company
 - Mastering NIST800.53, a cybersecurity blueprint
 - AI Security threats are getting smarter - Here's what you must know
 - How will AI reshape digital security in 2025?
 - Why government contractors MUST know about the False Claims Act!
 - Is your business losing money from these compliance errors?
 - Are your Employees secretly your biggest security risk?
 - Small Companies are loosing MILLIONS to these Security Mistakes
 - The Hidden Network Threats that Could DESTROY your Business
 - Modern Cybersecurity Made Simiple - Protect your data NOW!
 - Future Proofing Cybersecurity - What you need to know
 - AI Regulation just changed forever and here's why
 - Is your company ready for a MAJOR business disruption? Consider a BIA.
 - Preparing for data breaches
 - Beyond Compliance - Elevating your cybersecurity standards
 - Phishing Unveiled - protecting your organization from cyber threats
 - Risk Assessments - An unbiased view of compliance
 - How our 3-phase system makes compliance easy
 - SPAM, the hidden costs - protecting your business and productivity
 - Safeguard your business - the power of continuity planning and how Arrakis Consulting can help
 - Mastering GDPR Compliance: A guide for global businesses
 - Short bio on Arrakis Consulting and some of the services we offer
 - How does the 2025 DOJ Data Protection Law affect your privacy?
 - Why penetration testing is essential
 - Achieve 27001 certification with Arrakis Consulting
 - Simplify your next audit with Arrakis Consulting
 - Mastering SOC2 compliance with Arrakis Consulting
 - Mastering 27001 - Your path to cybersecurity success
 - Unlocking Audit Success with Arrakis Consulting
 - Streamline Compliance with Arrakis Managed Services (MSP)
 - Why vendor due diligence (VDD) is crucial for your business
 - Achieving CMMC compliance with Arrakis Consulting
 - How much money can non compliance REALLY cost your business?
 - CMMC Compliance, a guide for defense contractors
 - CMMC Compliance is vital for national security 
 - Terrifying truth behind insider threat
 - CIOReview about Arrakis Consulting
 - CMMC Podcast with Apptega 
 - Episode 29 - High level discussion about penetration testing
 - Episode 28 - How to spot SCAMS and PHISHING emails
 - Episode 27 - Cracking passwords
 - Episode  26 - OSINT
 - Episode 25 - Choosing a Cybersecurity Provider
 - Episode 24 - DoD/TCPIP Model
 - Episode 23 - OSI Model - Application Layer
 - Episode 22 - OSI Model - Presentation Layer
 - Episode 21 - OSI Model - Session Layer
 - Episode 20 - OSI Model - Physical Layer
 - Episode 19 - OSI Model - Transport Layer
 - Episode 18 - OSI Model - Network Layer
 - IP Addresses and how Routers Process them
 - Episode 17 - OSI Model - Datalink Layer
 - Episode 16 - OSI Model - High Level OSI Model Discussion
 - Episode 15 - Subnetting
 - Episode 14 - MSP and IT Company Liability
 - Episode 13 - Binary to Decimal Conversion
 - Episode 12 - Certifications in Greater Detail
 - Episode 11 - Administrative Controls
 - Episode 10 - Certifications
 - Episode 9 - Cyberinsurance
 - Episode 8 - Audits
 - Episode 7 - Risk Management
 - Episode 6 - High Level Discussion about Risk!!!
 - Episode 5 - Privacy
 - Episode 4 - BCDR
 - Episode 1 - Arrakis Video Series
 - Arrakis contributions to ISO27001:2022 whitepaper
 - ISO27002 Webinar Recording
 - Arrakis article on CMMC
 - Penetration Testing Webinar
 - Meeting Regulatory Requirements
 - "Best Practice"
 - Medical Device Online Article
 - Lodging Magazine Article
 - Cracking passwords with Hashcat

Payment Options


Arrakis takes a wide variety of payment but does not accept cash. Acceptable forms of payment are:

- ACH (Preferred)
- Bill.com
- PayPal
- Wire transfer (a service charge will apply)
- Credit Card (a service charge will apply) - this will be through either Stripe or PayPal.
- Check
- Zelle (up to $5,000)

Our Vendor Partnerships

We are masters at these frameworks and many more.

Our membership in professional organizations

Contact Us