# Strat Cyber Advisors > Strategic cyber risk advisory firm. Strat Cyber Advisors turns cyber risk into informed decisions by combining hands-on security and compliance expertise with strategic policy and geopolitical insight. Led personally by its principal, Atahan Bozdag. Contact: advisors@stratcyberadvisors.com. Free readiness assessments run in the browser; answers stay on the visitor's device unless they choose to send them. ## Advisory services - Security assessment: Find vulnerabilities and get a prioritized remediation roadmap tied to your obligations. - Governance & risk strategy: Clear ownership, a risk appetite aligned with business goals, and attention to systemic weaknesses. - Compliance & readiness: Readiness for SOC 2, ISO/IEC 27001, HITRUST, HIPAA, CMMC, FedRAMP and FISMA, plus the policies behind them. - Resilience & response: Incident response, disaster recovery and continuity plans that are tested, not shelved. - AI security & governance: Adopt AI tools with confidence: risk assessment, policy and controls aligned with recognized frameworks. - vCISO & board advisory: Ongoing security leadership, board briefings and tabletop exercises for executives. ## Intelligence Free resources for executives and boards, refreshed from government and industry sources. - [Current risk advisories](https://stratcyber.easterngatesoftware.com/current-risk-advisories/): Reviewed advisories on the most serious threats, plus a live list of actively exploited vulnerabilities and critical government alerts. - [Cyber risk intelligence](https://stratcyber.easterngatesoftware.com/cyber-risk-intelligence/): The threats, exploited vulnerabilities and policy changes that matter to executives and boards, from trusted sources, updated automatically. - [Weekly cyber risk news](https://stratcyber.easterngatesoftware.com/weekly-cyber-risk-news/): This Week in Cyber Risk: a free five-minute executive briefing every Monday on exploited vulnerabilities, major incidents and regulation. - [Cyber regulatory tracker](https://stratcyber.easterngatesoftware.com/cyber-regulatory-tracker/): Cybersecurity, privacy and risk rules as they move through government: proposals open for comment, final rules and effective dates. - [Cybersecurity advisories](https://stratcyber.easterngatesoftware.com/cybersecurity-advisories/): The latest cybersecurity advisories, live from official government and industry sources, including CISA's exploited vulnerabilities list. - [Regional risk advisories](https://stratcyber.easterngatesoftware.com/regional-risk-advisories/): Verified regional cyber and critical infrastructure risk advisories for U.S. organizations with operations, vendors or data abroad. - [Critical infrastructure](https://stratcyber.easterngatesoftware.com/critical-infrastructure/): Vulnerabilities, policy actions and threat activity across the 16 U.S. critical infrastructure sectors defined by CISA, by sector. - [Geopolitics & cyber risk](https://stratcyber.easterngatesoftware.com/geopolitics-cyber-risk/): How state-sponsored hackers, sanctions and conflicts shape which organizations get targeted and what they may do in response. - [Global attack activity](https://stratcyber.easterngatesoftware.com/global-attack-activity/): Where today's most active attack sources are, from SANS Internet Storm Center sensors: a live map, top countries and targeted services. - [Recent breaches](https://stratcyber.easterngatesoftware.com/recent-breaches/): Significant data breaches in plain English: what happened, who was affected, what data was exposed and the lessons for others. - [Defensive or offensive](https://stratcyber.easterngatesoftware.com/defensive-or-offensive/): Defensive and offensive cybersecurity through real incidents: what each side does, how authorized testing works, what defenders learn. ## Assessments See where you stand in minutes. Results stay in your browser, and you can save a PDF report. - [All readiness assessments](https://stratcyber.easterngatesoftware.com/are-you-ready/): Free readiness assessments for NIST CSF 2.0, SOC 2, HITRUST, HIPAA, CMMC 2.0, FedRAMP and FISMA: an instant score and a prioritized plan. - [NIST CSF 2.0 readiness](https://stratcyber.easterngatesoftware.com/nist-csf-2-0-readiness/): Free NIST CSF 2.0 readiness scorecard: see where your program stands on all six functions and what to fix first. About 7 minutes. - [SOC 2 readiness](https://stratcyber.easterngatesoftware.com/soc-2-readiness/): Free SOC 2 readiness scorecard: how close you are to an examination, which Trust Services Criteria need work, Type 1 or Type 2. - [HITRUST readiness](https://stratcyber.easterngatesoftware.com/hitrust-readiness/): Free HITRUST readiness scorecard across the 19 assessment domains: what's holding you back and which assessment (e1, i1 or r2) fits. - [HIPAA Security Rule readiness](https://stratcyber.easterngatesoftware.com/hipaa-sr-readiness/): Free HIPAA Security Rule readiness check for healthcare organizations and business associates: administrative, physical, technical safeguards. - [CMMC 2.0 readiness](https://stratcyber.easterngatesoftware.com/cmmc-2-0-readiness/): Free CMMC 2.0 readiness check for defense contractors: Level 1 or 2 across the NIST SP 800-171 families, plus SPRS obligations. - [FedRAMP readiness](https://stratcyber.easterngatesoftware.com/fedramp-readiness/): Free FedRAMP readiness check for cloud providers selling to federal agencies, under the 2026 Consolidated Rules and FedRAMP 20x. - [FISMA readiness](https://stratcyber.easterngatesoftware.com/fisma-readiness/): Free FISMA readiness scorecard: rate your security program the way Inspectors General do, across ten domains and five maturity levels. - [Incident response](https://stratcyber.easterngatesoftware.com/incident-response/): Experiencing a cyber incident? First steps for ransomware, a compromised email account or stolen data, where to report it, how to get help. ## Solutions Software built the way we advise clients to, plus compliance packages and toolkits. - [Apps you can trust](https://stratcyber.easterngatesoftware.com/apps-you-can-trust/): Software built the way Strat Cyber Advisors advises clients to: it runs in your environment, keeps your data in your control, keeps an audit trail. - [AppSentry™](https://stratcyber.easterngatesoftware.com/appsentry/): AppSentry™ scans source code, dependencies, endpoints and TLS inside your network on one severity scale, and reports coverage gaps as gaps. - [ContractMS™](https://stratcyber.easterngatesoftware.com/contractms/): ContractMS™: contract and matter management for in-house legal, where every obligation has an owner, a deadline and a decision. - [GRC packages](https://stratcyber.easterngatesoftware.com/grc-packages/): Audit-ready SOC 2 Type 2, HITRUST and ISO/IEC 27001 packages from one control library: field guides, policies, workbooks, mock audits. - [AI toolkit](https://stratcyber.easterngatesoftware.com/ai-toolkit/): AI security insights: how AI helps defenders detect, triage and respond faster, the new risks it introduces, and how to deploy it safely. - [Sample advisory](https://stratcyber.easterngatesoftware.com/sample-advisory/): A sample Strat Cyber Advisors advisory: a fictional campaign against healthcare networks, with real, cited vulnerabilities and guidance. ## Company A strategic cyber risk advisory firm, led personally by its principal. - [About](https://stratcyber.easterngatesoftware.com/about/): Strat Cyber Advisors is a strategic cyber risk advisory firm led by Atahan Bozdag, joining security and compliance with policy and geopolitics. - [Affiliates](https://stratcyber.easterngatesoftware.com/affiliates/): Strat Cyber Advisors' affiliates: partners whose tools help clients put cybersecurity, risk and governance into practice. - [Member library](https://stratcyberadvisors.com/member-library) (members area) - [Sign in](https://stratcyberadvisors.com/m/account) (members area) ## Frequently asked ### What does Strat Cyber Advisors do? Strat Cyber Advisors is a strategic cyber risk advisory firm. It offers security assessments, governance and risk strategy, compliance readiness, resilience and incident response, AI security and governance, and vCISO and board advisory, combining hands-on security and compliance expertise with strategic policy and geopolitical insight. ### Which compliance frameworks do you help with? Readiness for SOC 2, ISO/IEC 27001, HITRUST, HIPAA, CMMC, FedRAMP and FISMA, plus the policies behind them. The free self-assessments also cover the NIST Cybersecurity Framework (CSF) 2.0. ### Are the readiness assessments free? Yes. The NIST CSF 2.0, SOC 2, HITRUST, HIPAA Security Rule, CMMC 2.0, FedRAMP and FISMA scorecards are free and take about six or seven minutes. Each gives an instant score and a prioritized list of what to fix, and you can save a PDF report. In-depth SOC 2 Type 2, ISO 27001 and HITRUST assessments are for members. ### Where do my assessment answers go? They stay in your browser. Your answers are saved only on your own device unless you choose to send them. ### Who leads the work? Atahan Bozdag, Principal and Strategic Cyber Risk Advisor, leads every engagement personally, from scoping through delivery. He combines cybersecurity consulting and compliance expertise with a background in international affairs and geopolitical risk. ### What should I do during a cyber incident? Follow the first-steps checklist on the incident response page, report the incident, and contact Strat Cyber Advisors right away. The first hours matter, whether it is ransomware, a compromised email account, suspicious payments or data you think has been stolen. ### How can I keep up with cyber risk? Subscribe to This Week in Cyber Risk, a free five-minute executive briefing every Monday. The intelligence pages track advisories, exploited vulnerabilities, regulation, breaches and geopolitics, and the free app brings verified advisories and live CISA alerts to your phone with no account and no tracking. ### Is membership free? Yes. Joining is free and unlocks in-depth readiness assessments, executive and vendor toolkits, advisories and the briefing archive. ### How do I contact Strat Cyber Advisors? Email advisors@stratcyberadvisors.com, or book a consultation from any page.