{
  "$schema": "https://fedramp.gov/schemas/fedramp-advisor-information-schema-2026-06-24.json",
  "advisorName": "ControlSolid",
  "logo": "https://controlsolid.com/favicon.png",
  "serviceDescription": "ControlSolid provides FedRAMP readiness assessment, gap-analysis consulting and scoped GRC engineering support for cloud service providers, SaaS companies and technology vendors preparing a U.S. federal offering. Support connects applicable requirements to technical checks, traceable evidence and structured reporting for the selected path and class.",
  "contactInformation": {
    "pointOfContactName": "Kelvin O. Medina",
    "jobTitle": "Founder & Managing Principal",
    "email": "hello@controlsolid.com",
    "phone": "+1-561-330-5757",
    "companyWebsite": "https://controlsolid.com"
  },
  "servicesOffered": [
    {
      "serviceName": "FedRAMP readiness assessment"
    },
    {
      "serviceName": "FedRAMP gap analysis"
    },
    {
      "serviceName": "FedRAMP 20x readiness and scoped GRC engineering"
    },
    {
      "serviceName": "Requirement and KSI traceability, technical verification and evidence quality review"
    },
    {
      "serviceName": "Scoped evidence integration and schema-aligned reporting support"
    },
    {
      "serviceName": "System boundary and data-flow scoping"
    },
    {
      "serviceName": "Cloud architecture and inherited-control review"
    },
    {
      "serviceName": "NIST SP 800-53 Rev. 5 control gap analysis"
    },
    {
      "serviceName": "SSP and evidence roadmap"
    },
    {
      "serviceName": "POA&M and remediation planning"
    },
    {
      "serviceName": "Incident response and continuous monitoring readiness"
    },
    {
      "serviceName": "Independent 3PAO coordination preparation"
    },
    {
      "serviceName": "GRC and compliance automation platform evaluation and workflow support"
    }
  ],
  "frequentlyAskedQuestions": [
    {
      "question": "Can you help us choose GRC or compliance automation tooling?",
      "answer": "Yes. We can help clients evaluate and work with a suitable GRC or compliance automation platform based on their needs. Drata is one example, and ControlSolid maintains relationships with multiple technology providers in this category. Clients may choose the platform that fits their requirements. These relationships do not imply endorsement, certification, authorization, requirement, reseller arrangement, or exclusivity."
    }
  ],
  "website": "https://controlsolid.com",
  "independenceLimitation": "ControlSolid provides advisory readiness, gap-assessment consulting and scoped GRC engineering support. Provider-generated checks are not independent assessment. ControlSolid does not act as a 3PAO, perform the independent assessment it helps prepare, issue FedRAMP authorization or certification, or guarantee an agency Authorization to Operate, government endorsement, marketplace acceptance or completion dates."
}