Leadership
The team behind Merek.
Passion. Experience. Diligence.
We build cybersecurity from the inside out — starting with the people, not the technology.
Every interaction with technology is a choice. We build security programs rooted in awareness and intention, not fear.
We understand why humans make decisions online. That understanding becomes the foundation of everything we build.
Grounded in peer-reviewed cyberpsychology and behavioral science — not vendor hype or compliance checkbox thinking.
Security programs that your team can own and sustain. Built for people, not algorithms.
From compliance readiness to executive advisory, every engagement combines technical depth with human insight.
Define the boundary. Prove it holds. Defend it at assessment.
Learn More →A secure enclave improves your posture on day one. It reduces your compliance cost only if the boundary is scoped correctly and an assessor accepts that scoping. This free, self-guided assessment shows you your real scope, your SPRS posture, and what it would take to shrink the boundary.
Most contractors discover they're 30+ points below where they assumed. Fifteen minutes tells you the truth.
On 13 July 2026 the Department of War suspended CMMC Phase II and opened a 60-day reform review. NIST SP 800-171 Rev 2, DFARS 252.204-7012, annual affirmations, and SPRS scoring all remain in effect. Whatever assessment model emerges, someone still has to define which of your systems hold CUI — and defend that line.
Merek submitted written questions on the DAF Statement of Objectives (FA930426C0000) — covering ATO/ATC boundaries, OT and ITAR scope, and whether a government-furnished enclave actually narrows a contractor's assessment scope.
Merek responded to the CISA/GSA Request for Information (47QFRA26K0008) on strategic cyber tools acquisition.
We do this work because our clients are the small businesses these programs are built for.
Every engagement follows a proven methodology that combines technical depth with organizational understanding.
We listen first. Deep-dive into your environment, culture, and business objectives before recommending anything.
Rigorous technical and human-factor assessment against frameworks that matter to your industry.
Actionable remediation with clear priorities. Programs your team can own and sustain.
Ongoing advisory and compliance monitoring. Security isn't a project — it's a posture.
Passion. Experience. Diligence.
Startups to governments. K-5 classrooms to boardrooms. One commitment: security grounded in human consciousness.
Federal agencies, defense contractors, compliance-heavy environments
HIPAA, HITRUST, patient data protection
Banking, fintech, regulations & trust
K-12, higher ed, research institutions
Consumer data, PCI compliance, brand protection
OT security, supply chain, industrial systems
Rapid scaling, investor requirements, product security
Large organizations, complex environments, governance
Building conscious digital citizens through research-backed education that teaches why, not just what. Now serving 533+ students across three New Mexico schools.
Screen awareness and healthy tech habits
Digital citizenship and online respect
Building resilience against digital pressure
Media literacy and information evaluation
Bringing cyberpsychology-informed digital ethics to schools nationwide.
Learn About MindfulBytes →Whether you need compliance readiness, a virtual CISO, or a partner who understands the human side of cybersecurity — Merek is here.
