Crafted Compliance, Inc.

BACKGROUND

Please describe your company and position.

I am the Owner/Director of TEALAB

Describe what your company does in a single sentence.

TEALAB is a creative agency specializing in bespoke entertainment marketing, brand storytelling, and cross-platform asset development for the world's most iconic titles.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Crafted Compliance, Inc. to accomplish?

• Complete the 2025 TPN security assessment for our studio in alignment with MPAA and industry standards.
• Help us implement best practices to strengthen both short-term compliance and long-term infrastructure.
• Serve as a collaborative and knowledgeable partner throughout the assessment and remediation process—minimizing disruption while elevating outcomes.

SOLUTION

How did you find Crafted Compliance, Inc.?

Referral

Why did you select Crafted Compliance, Inc. over others?

Referred to me

How many teammates from Crafted Compliance, Inc. were assigned to this project?

1 Employee

Describe the scope of work in detail. Please include a summary of key deliverables.

Crafted Compliance handled our full TPN security assessment, from initial gap analysis to final audit review. Their guidance helped us align our internal practices with TPN’s evolving expectations, and they provided clear, actionable support throughout the process. We worked closely with Jamie Maragas, who was incredibly knowledgeable, responsive, and organized—she kept us on track and made a complex process feel manageable. Key deliverables included documentation review, remediation planning, procedural updates, and final submission prep.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We successfully achieved both Blue Shield and Gold Shield status for compliance with Motion Picture Association standards through our TPN assessment. These recognitions validate TEALAB’s rigorous adherence to industry best practices for security and content protection.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We were working on an intense timeline with limited internal resources and a highly demanding spec—Crafted Compliance, and especially Jamie Maragas, stepped in like an extension of our own team. They delivered with clarity, speed, and care across every milestone, answering every question and guiding us through the entire assessment process with exceptional professionalism. For a company our size, it could’ve felt overwhelming, but Jamie was truly our lifeline: organized, responsive, and always thinking ahead.

What was your primary form of communication with Crafted Compliance, Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Crafted Compliance stood out not only for their technical fluency and deep knowledge of TPN assessment protocols, but for how approachable, adaptable, and genuinely collaborative they were throughout the process. They offered guidance without rigidity, remained flexible as our needs evolved, and brought a human touch that’s often missing from security evaluations. Their balance of precision and warmth made a complex process feel not just manageable, but trusted.

Are there any areas for improvement or something Crafted Compliance, Inc. could have done differently?

Honestly, no—if anything, they went easy on this overwhelmed team of ours. Crafted Compliance (especially Jamie!) made a complex process feel manageable from day one. Every interaction was clear, kind, and constructive. We never felt judged or rushed, just supported.

BACKGROUND

Please describe your company and your position there.

MSM-NET, INC. is a growing Cybersecurity Company. 

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Crafted Compliance, Inc.?

Projects that involved physical and logical security assessments (vulnerability scanning/penetration testing), ISO 27001 and NIST compliance assessments (gap analysis/cybersecurity program development), and technical advisory work.

SOLUTION

How did you select this vendor and what were the deciding factors?

Crafted Compliance/RedPenSec was recommended to my organization by a cybersecurity/eGRC (Enterprise Governance, Risk, and Compliance) industry expert and we have been working with them since.

Crafted Compliance, Inc. has provided and executed several proposals that were comprehensive, transparent, and most aligned with our business goals and objectives. After working with several other companies, we felt most comfortable working with Crafted; they had a solid understanding of our environment and a clear plan on helping us achieve our goals.

Describe the project in detail and walk through the stages of the project.

Crafted Compliance has completed several projects for us within the eGRC space. They have also served as technical SMEs for our organization, helping us field and lead discussions related to the GSA’s Highly Adaptive Cybersecurity Services (HACS) and Information Technology Professional Services, to include the following practice areas:

• Penetration Testing
• Incident Response
• Cyber Hunt
• Risk & Vulnerability Assessments (RVA)
• NIST SP 800-14
• Generally Accepted Principles & Practices for Securing Information Technology Systems
• NIST SP 800-27A (Engineering Principles for Information Technology Security – Baselines for Achieving Security)

How many resources from the vendor's team worked with you, and what were their positions?

We mainly worked with three resources, plus their executive team:

• Principle
• Global Security Assessor/Auditor
• Architect; Lead, Global Security Compliance Assessor
• Cyber-Investigations Specialist
• Information Security Compliance Assessor

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The work that was completed by Crafted Compliance/RedPenSec allowed my organization to achieve our GSA/MAS Schedule, which has been in the works for several years now and couldn’t have been obtained without them, considering the tight timeframe and level of expertise needed.

How effective was the workflow between your team and theirs?

The workflow was highly adaptive and agile. Crafted Compliance’s communicative style has been pivotal throughout our projects

What did you find most impressive or unique about this company?

Experience, expertise, and rapid execution. The depth and breadth of their cybersecurity/compliance knowledge are extremely impressive, as is their global experience. Their portfolio is impressive/comprehensive.

Are there any areas for improvement or something they could have done differently?

I really can't think of anything. They were absolutely amazing, a truly elite team of eGRC professionals.

BACKGROUND

Please describe your company and your position there.

I am a member of the executive team for a global technology company.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Crafted Compliance, Inc.?

We’ve worked with Crafted Compliance on various internal cybersecurity/compliance concentric projects over the years. They have always taken the time to understand our objectives, bringing us perfectly tailored plans that addressed our concerns, providing us with actionable solutions.

SOLUTION

How did you select this vendor and what were the deciding factors?

Crafted Compliance was recommended to us by one of our board members who had worked with them at another company. We immediately liked their enthusiasm, expertise and ideas that felt more aligned with our business mission than the other firms we’d talked with and felt that their team would be the most effective partner for our needs.

We continue to work with them because we appreciate their customized methodologies and creative approach to helping us reach the results we desire. They have always been available to us for questions, providing expert guidance and support during each engagement.

Describe the project in detail and walk through the stages of the project.

We have worked with Crafted Compliance on a number of compliance driven initiatives, some of which required risk assessments, penetration testing and vulnerability scanning. They also performed some on-site interviews and physical security testing.

How many resources from the vendor's team worked with you, and what were their positions?

We worked with up to 5 people on any given project, depending on the size and scope of the initiative. Therefore, we were assigned resources from their PMO, technical testing teams, auditors, assessors, and a vCISO to help us carve out our overall cybersecurity strategy.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

Some of our projects had very tight timelines with limited budgets and Crafted was able to help us achieve our goals within these constraints. We continue to use them for our yearly compliance reviews and monthly vulnerability scanning requirements.

How effective was the workflow between your team and theirs?

The workflow was carefully mapped out starting with the Statement of Work which was nicely integrated with the associated Project Plan. Expectations, milestones, and dependencies were clearly spelled out with a schedule to meet our timelines. The technical testing was broken out separately, yet run in parallel with other projects, ultimately allowing for the completion of both programs in a timely manner.

What did you find most impressive or unique about this company?

Crafted didn’t feel like one of our usual vendors or third-party assessors, they felt like an extension of our organization.

Are there any areas for improvement or something they could have done differently?

Ultimately, we are very happy with our experience and will continue to use them.

BACKGROUND

Please describe your company and your position there.

I'm the principle consultant at Skyttech S.A. in Ecuador. Skyttech is a consulting company that provides Governance, Risk, and Compliance services. In addition to providing guidance, we also provide assessments, recommendation services and evaluations on security posture to them as well.

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Crafted Compliance, Inc.?

Our company is entering the market, and we needed additional help in setting up the Risk Management services that will be marketed to our clients and potential clients in Ecuador.

We needed a more professional feel in not only the presentation processes to potential clients, but also a more robust and impactful documentation and framework templates.

SOLUTION

How did you select this vendor and what were the deciding factors?

We selected crafted compliance due to the fact that they were able to provide the update documentation we requested, but also provided additional guidance on which frameworks would work best for specific clients, and how to utilize their template builds to output a strong professional presence.

Describe the project in detail and walk through the stages of the project.

We requested updated templates for several Risk Management frameworks, the NIST 800-53, CSF, and a simple 15 question questionnaire that we can provide to smaller IT shops.

We were presented with 2-3 option variations on an intake sheet to track, with variable outcome results tab to show status, input recommendations on how to lower risk footprint, and then populate out to dashboard for "at a glance" review and analysis of current Risk standing.

The end resulting templates and document outputs are easy to understand, use, and translates well for introductory stance to IT and IT risk processing that we were wanting to break into the market with.

How many resources from the vendor's team worked with you, and what were their positions?

Steve Strater, the Director was our chief point of contact. He provided a single point of contact that kept the process flowing and answered all our questions regarding timeline, expectations, and final products.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

The provided templates in a few proposals to prospective clients have attracted more interest in the Risk Management practices of our organization, as well as demonstrations of the process net a lean 20% reduction that helps streamline the entire artifact collection, interview, and assessment process.

How effective was the workflow between your team and theirs?

Everything was smooth and without issues. Communications were done via phone call, chat messaging, or video chat when they demonstrated the various template proposals.

What did you find most impressive or unique about this company?

I appreciated the time they invested in to learning about my business, our newness into the industry, and that the documents will be translated into another language for end use. The attentiveness and in-depth questioning were greatly appreciative of what our end goal objectives were.

Are there any areas for improvement or something they could have done differently?

Not at this time. We do have an evaluation period of end use product still to evaluate, and if any improvements or changes are identified at that time, we will approach them again and inquire if they are within the "base functional updates" that we have on retainer currently.

Other than that, other changes or additions would be out of scope for the project we did.

BACKGROUND

Please describe your company and your position there.

I am the owner of a small web design agency

OPPORTUNITY / CHALLENGE

For what projects/services did your company hire Crafted Compliance, Inc.?

Crafted Compliance performed several services for our firm including a NIST/ISO Gap Assessment, Penetration Testing, Vulnerability Scanning and a web application test against our servers and networks.

SOLUTION

How did you select Crafted Compliance, Inc., and what were the deciding factors?

We interviewed several firms and felt that Crafted Compliance was the most qualified and seemed to best understand our environment, goals and objectives.  Their team was compassionate, knowledgeable, and quick to respond to our requests. Their pricing was fair and fit our budget. We were confident we had found the right firm.

Describe the project in detail and walk through the stages of the project.

Due to the nature of the project, and as to not breach our NDA, we won't share specifics.  However, Crafted was comprehensive and multi-faceted in their approach and methodology.  We met with Crafted regularly throughout the project from the initial scoping calls through to delivery.  The final reports were detailed yet easy to understand and of great value to our organization as they used a no-nonsense risk-based approach to clearly outline a road map of what we needed to do and how we needed to do it.

How many resources from the Crafted Compliance, Inc.'s team worked with you, and what were their positions?

We collaborated with our assigned resources were available to us when we needed them, and we had regularly scheduled progress calls.  Our project team consisted of a technical PM, compliance lead and an ethical hacker.

RESULTS & FEEDBACK

Can you share any outcomes from the project that demonstrate progress or success?

We are extremenly pleased with Crafted's approach and the results achieved.  Their team was professional and easy to work with, exceeded our expectations and delivered on time.  We are very happy with the outcome of our engagement.

How effective was the workflow between your team and theirs?

Seamless. Their team was always quick to respond to our requests and proactive in communicating with us during our engagement.

What did you find most impressive or unique about this company?

We loved their professionalism, depth of knowledge, creative approach, and easy communication style.  They were genuinely interested in achieving results and helping our company from a global perspective and felt like more of a partner than vendor.

Are there any areas for improvement or something they could have done differently?

We didn't run into any issues and were very pleased with the entire interaction.

BACKGROUND

Introduce your business and what you do there.

I'm the VP of IT operations for a business services company.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Crafted Compliance, Inc.?

We needed help with our SOC 2 Type II readiness.

SOLUTION

What was the scope of their involvement?

Crafted Compliance, Inc. helped us with gap assessment, readiness, and audit for SOC 2. The team also reviewed our policies and provided guidance.

What is the team composition?

We worked with 2–5 teammates from Crafted Compliance, Inc.

How did you come to work with Crafted Compliance, Inc.?

I had worked with them on a previous project. They were already working for the company when I joined.

What is the status of this engagement?

The engagement lasted from October 2024–May 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

Crafted Compliance, Inc.'s work and other contributing factors, like our team's work, have led to a SOC 2 attestation report. The team has also helped us achieve faster readiness and an improved security posture.

How did Crafted Compliance, Inc. perform from a project management standpoint?

We primarily communicate through virtual meetings.

What did you find most impressive about them?

I'm impressed by their understanding of the nuances required to achieve the attestation.

Are there any areas they could improve?

There's nothing I can come up with.

BACKGROUND

Introduce your business and what you do there.

I'm the president of a financial services company. We provide advanced financial engineering and asset/liability management solutions, offering banks and credit unions cost-effective, user-friendly software for risk management, regulatory compliance, and financial modeling.

OPPORTUNITY / CHALLENGE

What challenge were you trying to address with Crafted Compliance, Inc.?

We needed help with an ISO 27001:2022 surveillance audit.

SOLUTION

What was the scope of their involvement?

Crafted Compliance, Inc. provided an audit report.

What is the team composition?

We worked with one teammate from Crafted Compliance, Inc.

How did you come to work with Crafted Compliance, Inc.?

They were a referral. We chose them because they were a great culture fit, offered good value for the cost, and had company values aligned with ours.

What is the status of this engagement?

We worked together from September–October 2025.

RESULTS & FEEDBACK

What evidence can you share that demonstrates the impact of the engagement?

We achieved compliance with the annex controls tested.

How did Crafted Compliance, Inc. perform from a project management standpoint?

They delivered on time. We primarily communicated via email and messaging apps.

What did you find most impressive about them?

We were impressed by their responsiveness and timeliness.

Are there any areas they could improve?

No, there was nothing they needed to improve.

BACKGROUND

Please describe your company and position.

I am the IT Manager of Estenomedia Services

Describe what your company does in a single sentence.

eSteno Media Services is a pioneering force in content localization and accessibility, providing services to broadcasters and to everyone who wants to reach a wider audience.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Crafted Compliance, Inc. to accomplish?

• TPN Gold Shield

SOLUTION

How did you find Crafted Compliance, Inc.?

Online Search

Why did you select Crafted Compliance, Inc. over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Crafted Compliance, Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We did the entire process of getting the gold shield with Trusted Partner Network, were we worked with Crafted Compliance on improving and documenting our entire computer infrastructure according to the latest industries standards.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Basically obtaining the Gold Shield from TPN.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They where very careful on the process and assestment time, delivering everything in the accorded times.

What was your primary form of communication with Crafted Compliance, Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Their approach was very close and their patience about the entire process, that was long.

Are there any areas for improvement or something Crafted Compliance, Inc. could have done differently?

No, we are very satisfied with how they handled the process.

BACKGROUND

Please describe your company and position.

 I am the Executive Producer of an arts, entertainment & music company 

Describe what your company does in a single sentence.

Post Production Services

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Crafted Compliance, Inc. to accomplish?
TPN security evaluation

SOLUTION

How did you find Crafted Compliance, Inc.?

• Referral
• Assigned by TPN

Why did you select Crafted Compliance, Inc. over others?

Referred to me

How many teammates from Crafted Compliance, Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Crafted Compliance was our assesor for the Trusted Partner Network evauation. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

Crafter Compliance helped us compete our TPN assesment and provided us with explanations and paths forward.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They were extremely friendly and personable while also being very professional and knowlegeable.  

What was your primary form of communication with Crafted Compliance, Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

• Their ability to guide us on topics that are not our expertise.
• They were very personable, accessible, and knowledgeable.

Are there any areas for improvement or something Crafted Compliance, Inc. could have done differently?

no, there was nothing they needed to improve on.

BACKGROUND

Please describe your company and position.

I am the Co-Founder & Managing Director of Zille Media

Describe what your company does in a single sentence.

We create cloud-based technology for media localisation and accessibility.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire Crafted Compliance, Inc. to accomplish?

• We wanted to understand more about the TPN security accreditation programme
• We needed a TPN Assessment to be completed

SOLUTION

How did you find Crafted Compliance, Inc.?

They were listed as an accredited assessor for the assessment we needed to complete.

Why did you select Crafted Compliance, Inc. over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Company values aligned

How many teammates from Crafted Compliance, Inc. were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We worked with Crafted Compliance to first; - understand more about how the TPN (Trusted Partner Network) cybersecurity Assessment worked, and then to; - complete this assessment. We received an excellent service and were met with perfect communication from start to finish. Crafted Compliance helped us understand everything about how to prepare for the assessment, and how to maintain our profile both during and after the process. They also went above and beyond to secure our assessment results in good time, which helped us with our own deliverables and also contributed a key requirement for us to begin working with a new client. We can recommend Crafted to anyone looking to achieve similar deliverables, and also verify that the people they will be in touch with are very kind, thoughtful, smart and exceptionally talented at what they do. We will definitely work with Crafted again, and are looking forward to our next collaboration.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

We completed our TPN Gold Shield Assessment as a direct result of working with Crafted Compliance.

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Crafted Compliance delivered all the deliverable in a timely manner, and even influenced the Assessment organisation to expedite the process for us. They responded swiftly to all our written communication, and scheduled meetings at short notice whenever we needed to talk something through. They were always happy answering questions outside the scope of work, and took their time making sure we had all the information we needed. Their detailed project management was kept slightly separate to our conversation with them, which was great as we did not have time to monitor this daily. We were happy that Crafted were so able to complete all their work with minimal input required from ourselves. We were of course kept informed in a general sense at every step of the way.

What was your primary form of communication with Crafted Compliance, Inc.?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

What we liked the most about Crafted Compliance was how personable, kind, funny and clever the people in the organisation were. Cybersecurity can be technical in the extreme, and it was great to have such a wonderfully human element running alongside the competency and efficiency of the work delivered by Crafted. We laughed and smiled during every meeting, and always came away from our conversations feeling as though our questions had been fully answered and useful information which we might not have considered was offered freely. Crafted also explained about cost-saving measures we could take, which we would have otherwise paid them unnecessarily for. They very much are an organisation with a heap of integrity.

Are there any areas for improvement or something Crafted Compliance, Inc. could have done differently?

Nothing comes to mind as something that we as clients would have noticed for areas of improvement at Crafted Compliance. We were entirely happy and confident working with them.