---
title: "GSA Schedule | Huttan Risk MAS 47QTCA23D00CX"
description: "Buy CMMC-aligned cybersecurity and AI governance through GSA MAS 47QTCA23D00CX. Veteran-owned small business, CMMC RP credentialed. Pricing and ordering details."
canonical: https://huttanrisk.com/gsa-schedule
---

Federal Procurement

# Government Cybersecurity & AI Governance Services (GSA Schedule)

**Huttan Risk** is a Veteran-Owned Small Business (VOSB) and GSA Multiple Award Schedule contract holder under **47QTCA23D00CX**. We deliver CMMC-aligned cybersecurity and operational AI governance to federal, state, local, and tribal agencies via simplified task-order procurement.

Request a GSA Quote

Verify on GSA eLibrary

4

NAICS Codes

90-Day

Agency Deployment

40+ yrs

Combined Experience

CMMC RP

Credentialed Leadership

Contract of Record

## GSA Multiple Award Schedule

Contract Number

47QTCA23D00CX

UEI

FDMKYXHBDKK3

CAGE Code

8PDQ8

Business Size

VOSB · Small

State

Colorado

SINs

54151AI · 874-4

NAICS

541512 · 541519 · 611430 · 541690

CMMC L1 Self-Certified

CMMC L2 In-Progress

CMMC RP

Buying Through Schedule

## Streamlined procurement, buying through Schedule.

The GSA Multiple Award Schedule (MAS) is the federal government's primary vehicle for efficient acquisition. As an awarded contractor, we provide a direct path to high-quality cybersecurity and AI governance services — eliminating lengthy open-market bidding.

### Pre-Negotiated Ceiling Pricing

Labor categories and rates already vetted by GSA contracting officers. Task orders within the simplified acquisition threshold.

GSA Advantage!

### FAR Subpart 8.4 Compliance

All ordering procedures strictly follow FAR Subpart 8.4 — fully compliant with federal acquisition standards.

Read FAR 8.4

### VOSB Socioeconomic Credit

Veteran-Owned Small Business set-aside helps your agency meet socioeconomic procurement goals.

SBA Guide

The Ordering Workflow

## Built for federal procurement speed.

Our internal process mirrors the speed and efficiency required by government timelines.

1

### Request

Submit your RFQ via GSA eBuy or directly to our team.

2

### Response

Expect a firm quote within 1 business day.

3

### Award

Issuance of your task order under pre-negotiated MAS terms.

4

### Kickoff

Project kickoff within days — assigned PM and security cleared team.

5

### Delivery

Deliverables with SSP, POAM, and program artifacts where applicable.

Contracting Services

## Contract-grade services, scoped for the federal lifecycle.

Every service is delivered under [GSA Schedule 47QTCA23D00CX](https://www.gsaelibrary.gsa.gov/ElibMain/contractorInfo.do?contractNumber=47QTCA23D00CX&contractorName=HUTTAN+HOLDING%2C+LLC&executeQuery=YES), governed by NIST and CMMC frameworks and DoD-aligned security practices.

### AI Governance & Integration (AIGIP)

Federal-grade AI governance aligned to NIST AI RMF and OMB M-25-21.

- Governance framework design and policy libraries
- AIGIP certification pathways (7 credentials: executive, government, risk, practitioner, implementation, plus a free youth course)
- Fractional Chief AI Officer (fCAIO) advisory

### Cybersecurity Compliance & Advisory

CMMC 2.0, NIST 800-171/53, and CUI governance for DoD and DIB contractors.

- CMMC L2 readiness, SSP and POAM authoring
- vCISO, SOC advisory, digital forensics
- CUI data governance, SIEM, vendor cyber risk

### Agentic AI & Technology Services

Custom AI agents and dashboards for regulated environments.

- Agent development and workflow automation
- RAG integration and executive AI dashboards
- Model provenance, bias, and explainability assessments

### Workforce Training (AIGIP)

AI literacy and governance training aligned to OMB / OPM / DOL guidance.

- Executive, practitioner, and specialist certifications
- LMS-delivered or instructor-led; executive briefings included
- Per-cohort or department-wide licensing

### Board & Expert Services

Cyber and AI guidance at the board and litigation level.

- Board-level cybersecurity advisory
- Expert witness — cyber and AI litigation
- Director-level risk briefings

### Turnkey CMMC Programs

End-to-end CMMC programs delivered through our Turnkey Cyber subsidiary.

- Gap assessment through audit-ready posture
- GCC High enclave design and CMMC-qualified MSP integration
- Continuous monitoring and POA&M management

Visit Turnkey Cyber

Why Huttan

## Built for the 2026 federal procurement convergence.

### Dual Expertise — One Contract

Cybersecurity AND AI governance under one schedule — eliminating multi-vendor coordination overhead and 15–25% teaming premiums.

### Pre-Built Platform — 90-Day Deployment

Stand up an AI governance program in 90 days instead of 18 months using the AIGIP platform and pre-developed training content.

### DoD-Credentialed Leadership

Principals hold CMMC Registered Practitioner credentials — a rare DoD-recognized qualification for DIB and CUI work.

### Task Orders Without Open Competition

Agencies issue task orders directly against our schedule within the simplified acquisition threshold — shortening time-to-award.

Transparent Pricing

## AIGIP credentialing — clear, published pricing.

Individual credential and enterprise pricing for AI governance training. Agency labor-category and engagement pricing is available via GSA Advantage and on RFQ.

12 months of course access

Permanent certificate of completion — never expires

Active digital credential — valid 12 months from issue

### Individual Credentials

All credentials include 12 months of course access, a permanent completion certificate, and a 12-month active digital badge.

| Credential | Audience | Annual Prepaid | Monthly (×12) |
| --- | --- | --- | --- |
| AIGLCertified AI Governance Leader | Executive / Policy / Governance | $395 | $45/mo |
| AIRMCertified AI Risk & Compliance Professional | Risk / Compliance / Audit / Legal | $495 | $55/mo |
| AIPRCertified AI Professional | Practitioner / Technical | $345 | $39/mo |
| AIGOVCertified Government AI Leader | Public Sector / Federal / Procurement | $595 | $65/mo |
| AIILCertified AI Implementation Leader | Implementation / Cross-functional | $695 | $75/mo |
| PASSAIGIP Academy Pass (All 5 Core Courses) | Full Pathway / Employer-Sponsored | $1,495 | $149/mo |

Monthly installment plans carry a 12-month non-cancellable annual commitment.

Any 2 courses

10% off

Any 3 courses

15% off

Any 4 courses

20% off

Academy Pass

Best value

### Enterprise Seat Bands

Volume discounts off list price.

| Seat Band | Discount | Includes |
| --- | --- | --- |
| 5–24 seats | 10% | Team dashboard, basic reporting |
| 25–99 seats | 15% | Admin console, cohort scheduling, manager reporting |
| 100–249 seats | 20% | SSO/SCIM option, quarterly reviews, dedicated success contact |
| 250+ seats | 25–30% | Dedicated CSM, integrations, seat pools, custom reporting (2-yr term) |

### Enterprise & Agency Buyers

SSO/SCIM, admin console, cohort management, dedicated CSM, custom reporting, and seat pools for agency-wide deployments.

Contact Sales

Governance Essentials

Cross-functional governance launch (Leader + Risk + Practitioner)

From $1,051 / seat

100 seats · ~$105,100

Public-Sector

Federal / agency procurement and policy alignment

From $792 / seat

100 seats · ~$79,200

Academy Enterprise

Full workforce pathway (all 5 core courses)

$1,121.25 / seat at 250 seats

250 seats · ~$280,312

### Renewals & Recertification

After year 1, choose what fits your role.

Year-2 Access Renewal

$149/yr (single course) · $249/yr (all owned)

Continued access to course materials, updates, and the learner portal for renewed credentials.

Recertification Only

$99 / credential / year

Renewal assessment that extends the active digital badge for another 12 months without full course repurchase.

### Indicative Agency Engagement Roles

Indicative GSA labor categories for planning purposes only — official ceiling rates via [GSA Advantage](https://www.gsaadvantage.gov/) and on RFQ.

| Labor Category | Unit | Tier | Indicative Rate |
| --- | --- | --- | --- |
| vCISO | Per hour | Principal | On RFQ |
| CMMC Registered Practitioner (RP) Advisor | Per hour | Senior / Principal | On RFQ |
| AI Governance Lead — fCAIO | Per hour / engagement | Principal | On RFQ |
| Security Engineer | Per hour | Junior / Senior | On RFQ |
| GRC / Compliance Analyst | Per hour | Junior / Senior | On RFQ |
| AIGIP Instructor (Cohort) | Per cohort | Senior | On RFQ |
| Expert Witness — Cyber & AI | Per hour | Principal | On RFQ |
| Project Manager — Government | Per hour | Senior | On RFQ |

AIGIP courses are **aligned to the NIST AI RMF**. NIST states that the AI RMF is intended for voluntary use and does not provide certification or endorsement of framework-related services.

Past Performance

## Delivered against the frameworks that matter.

Selected engagements across DoD DIB, regulated SaaS, and AI-governance pilots. A detailed past performance statement is available upon request.

### Corporate Merchandiser — Manufacturer

PCI DSS

NIST CSF

NIST PF

AIGIP

PCI DSS audit findings reduced from several hundred to zero via SAQ D → SAQ A migration; AIGIP delivered; security posture enabled successful PE diligence.

### EHS Data Platform

TX-RAMP

NIST CSF / PF / SSDF

800-171

AIGIP

Achieved TX-RAMP certification; security maturity facilitated onboarding of 12 new global EHS clients; AIGIP pilot to 2 leadership personnel.

### DoD Training Systems Contractor

CMMC 2.0

NIST 800-171

GCC High

AIGIP

Architected CMMC-compliant GCC High enclave protecting DoD DIB CUI; AIGIP training video generation delivered for multiple Army & Navy contracts.

### Building Technology & Automation

CMMC 2.0

NIST 800-171

GCC High

NIST AI RMF

Achieved CMMC L1 self-certification; CMMC L2 readiness underway; building GCC High enclave with CMMC-qualified MSP; AIGIP training delivered to 3 leadership personnel.

Credentials & Frameworks

## Engineering compliance into every workflow.

CMMC Level 1 self-certified · CMMC Level 2 in-progress · CMMC Registered Practitioner credentialed leadership.

VOSB

GSA MAS

CMMC RP

NIST AI RMF

OMB M-25-21

NIST 800-171

NIST 800-53

NIST CSF

NIST PF

NIST SSDF

PCI DSS

TX-RAMP

GCC High

Huttan Risk Ecosystem

## One contract, an integrated portfolio of specialized brands.

### TurnkeyCyber.us

Cybersecurity, vCISO, SIEM, digital forensics, CMMC 2.0 / NIST 800-171 programs

### AIGIP.ai

AI governance certification & training aligned to NIST AI RMF and OMB guidance

### AIRiskPartners.ai

AI risk management, governance advisory, and executive AI education

### CyberBoardTalent.com

Board-level cybersecurity advisory for agencies and regulated entities

### Cybersecurity-Expert-Witness.com

Expert witness — cyber and AI litigation (CMMC, NIST 800-171)

Federal Point of Contact

## Ready to issue a task order?

Contact our team directly or request a quote and we'll reply within one business day.

Government Contract Specialist

Amen Khan

amen@huttanholdingllc.com

Managing Partner

Ray Hutchins

rh@cybercecurity.com

303-887-5864

Huttan Risk · P.O. Box 270072 · Littleton, CO 80127

Request a GSA Quote

Capabilities Statement (PDF)

FAQ

## GSA schedule FAQ

Contract, ordering and pricing questions we hear most often from federal buyers.

### What is Huttan Risk's GSA contract number?

Huttan Risk holds GSA Multiple Award Schedule contract 47QTCA23D00CX under SINs 54151AI and 874-4, with UEI FDMKYXHBDKK3 and CAGE code 8PDQ8. The contract can be verified on GSA eLibrary.

### How does an agency order from the schedule?

Ordering follows FAR Subpart 8.4. An agency defines the requirement, requests a quote from Huttan Risk, receives a scoped quote against pre-negotiated ceiling rates, and issues the task order directly to the GSA contract — no separate competition process is required.

### What can be purchased under the contract?

Cybersecurity and IT risk services (assessments, CMMC readiness, vCISO support, GRC deployment and managed compliance), AI risk and governance services, and AIGIP AI governance credential training and enterprise seat licensing.

### Is Huttan Risk a small business or set-aside vendor?

Yes. Huttan Risk is a Veteran-Owned Small Business based in Colorado, so awards can count toward an agency's socioeconomic procurement goals. The team includes a CMMC Registered Practitioner, and the company is CMMC Level 1 self-certified with Level 2 in progress.

### How is pricing determined?

Services are priced from GSA-vetted labor categories and ceiling rates published on this page. AIGIP credential training is priced per credential, with bundle and enterprise seat-band pricing available for volume purchases.

### Who is the federal point of contact?

Amen Khan, Government Contract Specialist (amen@huttanholdingllc.com), and Ray Hutchins, Managing Partner (rh@cybercecurity.com, 303-887-5864). Quote requests receive a reply within one business day.
