--- title: "Huttan Risk | IT & AI Risk Management" description: "Veteran-owned IT and AI risk management holding company. Cybersecurity, CMMC readiness, AI governance and AIGIP credentials. GSA MAS 47QTCA23D00CX." canonical: https://huttanrisk.com/ --- 303-887-5864 mitch@huttanholdingllc.com Home About Us AI Risk IT Risk GSA Schedule Contact Us IT & AI Risk Management # IT & AI Risk Management for High-Accountability Organizations Huttan Risk owns and operates specialized IT and AI risk management companies that help organizations protect critical systems, meet regulatory obligations, and grow enterprise value. We pair proven frameworks with AI-driven methodologies to reduce risk quickly — and keep it down. - Cut IT infrastructure and data-breach risk with turnkey NIST, CMMC, and regulatory compliance programs. - Govern AI adoption with secure development, agent integration, and executive-level AI education. - Give your board measurable risk reduction, audit readiness, and a clear path to compliance. Serving on the Front Lines of the [Global Cyber War](https://turnkeycyber.us/resources/white-papers/global-cyberwar-societal-response/) Our Focus ## Our Risk Management Focus ### IT Infrastructure Risk Assessments, hardening, continuous monitoring, and incident response that secure networks, endpoints, and data. Risk outcome:Reduces breach likelihood and operational downtime. ### Regulatory & Compliance Risk Turnkey programs aligned with NIST CSF and AI RMF, CMMC 2.0, NY DFS 500, HIPAA, and GSA CUI requirements. Risk outcome:Accelerates audit readiness and lowers regulatory exposure. ### AI & Automation Risk AI governance, model and data risk management, secure agent deployment, and executive AI education. Risk outcome:Mitigates hallucination, data-leakage, and governance risk. AI Company Certification Program ## Get Your Organization AI-Governed — and Certified The AI Company Certification Program builds a working AI governance capability inside your organization and then certifies it against a published standard. AIGIP owns the credential, framework and training; AI Risk Partners runs the program with your team. Three certification levels take you from an AI readiness baseline to an assured, AI-native operating model. Foundational baseline ### AI-Ready Organization An evidence-based AI readiness baseline: who is accountable, where AI is already in use, and what has to happen next. See what it requires Primary certification ### AIGIP Verified AI-Governed Organization A functioning AI governance operating model — policies, controls and oversight — designed, implemented and evidenced for a named scope. See what it requires Advanced certification ### AIGIP Assured AI-Native Organization Responsible AI embedded in the operating model, with governed AI systems evidenced running in production. See what it requires ### How the Program Works One capability, three parties. Certification is the proof at the end of the work — not the reason to start it. Standard & credential owner #### AIGIP aigip.ai Owns the standard, framework and training, reviews the evidence and issues the certification. Visit AIGIP Delivery partner #### AI Risk Partners airiskpartners.ai Runs the program with your team: assessment, governance build-out and the evidence package. Visit AI Risk Partners Your organization #### Client Board, risk, IT & business owners Provides context, access and ownership — and ends up with a certified AI capability. Talk to us Explore the Certification Program Schedule a Certification Readiness Call What We Do ## Capabilities Statement ### Who We Are / What We Do - **Huttan Risk (VOSB)** sits at the intersection federal procurement is converging on for 2026 — **CMMC Registered Practitioner credentials combined with operational AI governance under one GSA MAS contract.** - Agencies acquire **AI workforce training, AI risk management, and CMMC-aligned cybersecurity** via task orders against [GSA Contract 47QTCA23D00CX](https://www.gsa.gov/technology/it-contract-vehicles-and-purchasing-programs/multiple-award-schedule-it/it-professional-services), under the simplified acquisition threshold. - **AI Governance & Integration (AIGIP)** — federal-grade AI governance aligned to NIST AI RMF and OMB M-25-21; policy libraries, AIGIP certification pathways, and fractional Chief AI Officer (fCAIO) advisory. Also delivered through [AIRiskPartners.ai](https://airiskpartners.ai/). - **Cybersecurity Compliance & Advisory** — CMMC 2.0, NIST 800-171/53, and CUI governance for DoD and DIB contractors; vCISO, SOC advisory, and digital forensics through [Turnkey Cyber](https://turnkeycyber.us/). - **Agentic AI & Technology Services** — custom AI agents, RAG integration, executive AI dashboards, and model provenance, bias, and explainability assessments for regulated environments. - **Board & Expert Services** — board-level cybersecurity advisory and expert witness for cyber and AI litigation. We serve as a [CMMC Registered Practitioner (RP)](https://cyberab.org/Member/RP-1143-Tanenbaum-Mitch). Download Full Capabilities Statement (PDF) ### Company History Huttan Risk, now positioned as an **IT and AI risk management** company, traces its roots to 2016, when it was formed through the merger of two cybersecurity firms. Drawing on more than 40 years of combined experience through its subsidiaries, the company helps organizations strengthen their information defenses and adapt to evolving risk landscapes. Deep expertise in modern NIST and DoD risk management frameworks and a disciplined commitment to best practices distinguish Huttan Risk in the marketplace. Remember: Often it's the WAY you do something that defines success or failure. #### Why Huttan Dual Expertise — One Contract Cybersecurity AND AI governance under one GSA schedule. Pre-Built Platform — 90-Day Deployment Stand up an AI governance program in 90 days vs. 18 months. DoD-Credentialed Leadership Principals hold CMMC Registered Practitioner credentials. Our Portfolio ## Our Companies Training & Credentials ### AIGIP aigip.ai AI governance training and professional credentials — role-based courses and enterprise seat licensing for teams that must operationalize AI policy. Visit Site AI Risk Management ### AI Risk Partners airiskpartners.ai AI risk assessments, governance program build-out, and AI policy development aligned to NIST AI RMF and emerging federal guidance — plus the organization-level AI certification program (AI-Ready, AIGIP Verified, AIGIP Assured). Visit Site Company Certification Program IT & Cyber Risk / Compliance ### Turnkey Cyber turnkeycyber.us Cybersecurity, privacy, and compliance programs — CMMC 2.0 and NIST 800-171 readiness, vCISO, assessments, and managed compliance. Visit Site What We Offer ## Technical Services ### Technical Services Risk outcome: Reduces IT infrastructure, application, and operational risk. Strategy Development (IT, Security, Privacy) SIEM Design and Implementation Data Governance & Management AI Risk Management — Find, Control & Govern AI NEW Risk outcome: Reduces shadow-AI, vendor-AI, and model-risk exposure. Practical AI governance for organizations already exposed to shadow AI, vendor AI features, and unmanaged model risk — delivered through AIRiskPartners.ai. ▸ Explore our AI Risk Management page → Visit AIRiskPartners.ai ↗ ### Compliance Services Risk outcome: Improves audit readiness and reduces regulatory risk. Government and Regulatory Compliance - – 800-171/CMMC 2.0 - – NIST CSF 2.0/PF/SSDF/AI - – HIPAA - – ISO 27000 - – CISA CPG - – PCI - – NY DFS 500 Cybersecurity Awareness Training - – Board and Top Management Training - – Phishing Training - – Exclusive Training Content ### Consulting Services Risk outcome: Provides board-level risk oversight and execution capacity. - [On-demand Virtual CISO/IT Director Support](https://turnkeycyber.us/solutions/) - [Vendor Cyber Risk Management](https://turnkeycyber.us/assessments-and-testing/) - [Expert Witness Support](https://cybersecurity-expert-witness.com/) - [Board of Directors Services](https://www.cyberboardtalent.com/) - [Short / Long Term IT Project Execution](https://turnkeycyber.us/solutions/) - [GRC Deployment/Support](https://turnkeycyber.us/resources/white-papers/grc-solutions-assessment-2025/) - [M&A IT Integration Services](https://www.cybercecurity.com/M&A_IT_Integration_Services/) AIGIP — The AI Governance & Implementation Program 7 Credentials Risk outcome: Reduces AI adoption, governance, and change-management risk. Seven stackable AI credentials issued via Credly — five certification bootcamps plus an executive credential and a free youth course — for boards, CEOs, government leaders, risk professionals, practitioners, implementation teams, and students. Course 1 #### Certified AI Governance Leader Boards, executives & professionals who set direction and own risk 8–12 hrs · Briefings, guided modules, executive playbooks Course 2 #### Certified AI Risk & Compliance Professional Risk, compliance, cybersecurity & audit professionals 6–10 hrs · Frameworks, risk models, audit tools Course 3 #### Certified AI Professional Independent business professionals applying AI day-to-day 6–10 hrs · Hands-on workflows, practical use cases Course 4 #### Certified Government AI Leader Federal, state & local professionals overseeing or implementing AI 12–20 hrs · Policy-driven modules, governance frameworks Course 5 #### Certified AI Implementation Leader Requires AIGL or AIGOV Managers and teams who build, run & deliver AI safely 20–35 hrs · Working sessions, policy packs, deployment toolkits Executive credential #### Certified AI Executive Leader No coursework — by engagement The CEO or top leader who sets risk appetite, approves policy & signs the governance attestation Two live sessions · Sessions, governance decisions, signed attestation Youth course #### Certified AI High School Student Students ages 14–18 building practical AI literacy — always free 2–4 hrs · Interactive lessons, videos, prompt exercises All courses include: Frameworks, templates, decision tools, readiness assessments, curated resources, ongoing advisory support, and access to AIGIP governance communities. Learn More → NEW (Jan 2026) GSA CUI Security Requirements We help GSA vendors who access/transmit/store CUI comply with IT Security Procedural Guide: Protecting CUI in Nonfederal Systems and Organizations (Process CIO-IT Security-21-112) — RMF-aligned documentation, assessment readiness, and ongoing monitoring. Learn ## Resources & Content Position Papers Cybersecurity Blog Fireside Chats Executive Training Videos Training/Informational Videos Training & Webinars Press Releases YouTube Channel mitch@huttanholdingllc.com 720-891-1663 LinkedIn #### Explore Home About Us AI Risk Management IT Risk Management GSA Schedule Company Certification Program Contact Us #### Organizations We're Part Of #### Strategic Partnership NSA Cybersecurity Collaboration Partner - • Liaison between NSA CCC and our clients - • Communicate identified risks from the NSA CCC database - • Implement NSA CCC services to reduce client risk profiles #### Company IDs - Huttan Holding LLC CAGE: 8pdq8 - Huttan Holding UEI: FDMKYXHBDKK3 - TCPS LLC CAGE: 8pws0 - TCPS UEI: C67NHK9N6KS5 - CyberCecurity LLC CAGE: 89sk5 - CyberCecurity UEI: T79XMTM5NE63 - TCPS DUNS: 1175 933 20 - SIN#: 54151S #### NAICS Codes - 541512 – Computer system design services - 541990 – Other professional, scientific & technical services - 541513 – Computer facilities management services - 541519 – Other computer related services - 541611 – Administrative & general management consulting - 611420 – Computer training #### Business Type - SBA verified small business - SBA verified veteran owned business CMMC Level 1 Self-Assessed & Affirmed Actively progressing toward CMMC Level 2 readiness. Copyright © 2026 Huttan Risk (Huttan Holding, LLC). All Rights Reserved. Do Not Sell My Personal Information