Cybersecurity Maturity Assessment
NIST CSF 2.0 Current and Target Profiles, risk-ranked findings, a POA&M, and an executive readout.
NYC & NYS Agencies · Certified MWBE
Government Cybersecurity Governance & GRC Modernization.
Serenport helps New York City and New York State agencies assess cybersecurity maturity, modernize governance, risk, and compliance programs, and report risk with clarity, as a NYS- and NYC-certified MWBE and Drata partner.
What we deliver for agencies
Clear risk, accountable owners, measurable progress.
Deliverable-based, milestone-driven engagements designed for public-sector oversight.
GRC Modernization
Move from spreadsheets to continuous compliance with Drata licensing, implementation, and evidence automation.
Security Governance & Risk Reporting
Governance charters, risk registers, KPIs and KRIs, and reporting that agency leadership and oversight bodies can act on.
Fractional CISO & Advisory
Senior cybersecurity leadership for strategy, program oversight, audit follow-through, and incident readiness.
How to work with us
Two ways to engage Serenport.
Direct agency engagement
A combined engagement of cybersecurity advisory, Drata implementation, and, where authorized, Drata licensing, structured as fixed-scope deliverables with milestones and acceptance criteria.
All engagements are subject to applicable procurement rules, competition, and agency approval requirements.
Prime contractor teaming
Serenport serves as the MWBE cybersecurity and GRC specialist under a larger contract. The prime provides the contract vehicle; we provide NIST CSF, GRC, and Drata expertise, and support MWBE utilization goals.
Discuss teamingProcurement profile
The details procurement teams ask for.
NYC SBS M/WBECert. No. MWCERT2013-36
NYS MWBECertified (ESD)
NYC Vendor No. (FMS)VC00156793
NAICS codes541519 · 541690 · 541611 · 541512
Primary NIGP commodity codes91890 · 91871 · 91802 · 91884 · 91832 · 91856 · 91809
Modernize your agency's cybersecurity governance.
Talk with a Serenport advisor about assessments, GRC modernization, or teaming opportunities.
Drata is a trademark of Drata Inc. Serenport Information Technology Inc. is an independent Drata partner. FedRAMP is a registered trademark of the U.S. General Services Administration.