Federal Procurement
Government Cybersecurity & AI Governance Services (GSA Schedule)
Huttan Risk is a Veteran-Owned Small Business (VOSB) and GSA Multiple Award Schedule contract holder under 47QTCA23D00CX. We deliver CMMC-aligned cybersecurity and operational AI governance to federal, state, local, and tribal agencies via simplified task-order procurement.
4
NAICS Codes
90-Day
Agency Deployment
40+ yrs
Combined Experience
CMMC RP
Credentialed Leadership
Contract of Record
GSA Multiple Award Schedule
Contract Number
47QTCA23D00CX
UEI
FDMKYXHBDKK3
CAGE Code
8PDQ8
Business Size
VOSB · Small
State
Colorado
SINs
54151AI · 874-4
NAICS
541512 · 541519 · 611430 · 541690
Buying Through Schedule
Streamlined procurement, buying through Schedule.
The GSA Multiple Award Schedule (MAS) is the federal government's primary vehicle for efficient acquisition. As an awarded contractor, we provide a direct path to high-quality cybersecurity and AI governance services — eliminating lengthy open-market bidding.
Pre-Negotiated Ceiling Pricing
Labor categories and rates already vetted by GSA contracting officers. Task orders within the simplified acquisition threshold.
GSA Advantage!FAR Subpart 8.4 Compliance
All ordering procedures strictly follow FAR Subpart 8.4 — fully compliant with federal acquisition standards.
Read FAR 8.4VOSB Socioeconomic Credit
Veteran-Owned Small Business set-aside helps your agency meet socioeconomic procurement goals.
SBA GuideThe Ordering Workflow
Built for federal procurement speed.
Our internal process mirrors the speed and efficiency required by government timelines.
Request
Submit your RFQ via GSA eBuy or directly to our team.
Response
Expect a firm quote within 1 business day.
Award
Issuance of your task order under pre-negotiated MAS terms.
Kickoff
Project kickoff within days — assigned PM and security cleared team.
Delivery
Deliverables with SSP, POAM, and program artifacts where applicable.
Contracting Services
Contract-grade services, scoped for the federal lifecycle.
Every service is delivered under GSA Schedule 47QTCA23D00CX, governed by NIST and CMMC frameworks and DoD-aligned security practices.
AI Governance & Integration (AIGIP)
Federal-grade AI governance aligned to NIST AI RMF and OMB M-25-21.
- Governance framework design and policy libraries
- AIGIP certification pathways (7 credentials: executive, government, risk, practitioner, implementation, plus a free youth course)
- Fractional Chief AI Officer (fCAIO) advisory
Cybersecurity Compliance & Advisory
CMMC 2.0, NIST 800-171/53, and CUI governance for DoD and DIB contractors.
- CMMC L2 readiness, SSP and POAM authoring
- vCISO, SOC advisory, digital forensics
- CUI data governance, SIEM, vendor cyber risk
Agentic AI & Technology Services
Custom AI agents and dashboards for regulated environments.
- Agent development and workflow automation
- RAG integration and executive AI dashboards
- Model provenance, bias, and explainability assessments
Workforce Training (AIGIP)
AI literacy and governance training aligned to OMB / OPM / DOL guidance.
- Executive, practitioner, and specialist certifications
- LMS-delivered or instructor-led; executive briefings included
- Per-cohort or department-wide licensing
Board & Expert Services
Cyber and AI guidance at the board and litigation level.
- Board-level cybersecurity advisory
- Expert witness — cyber and AI litigation
- Director-level risk briefings
Turnkey CMMC Programs
End-to-end CMMC programs delivered through our Turnkey Cyber subsidiary.
- Gap assessment through audit-ready posture
- GCC High enclave design and CMMC-qualified MSP integration
- Continuous monitoring and POA&M management
Why Huttan
Built for the 2026 federal procurement convergence.
Dual Expertise — One Contract
Cybersecurity AND AI governance under one schedule — eliminating multi-vendor coordination overhead and 15–25% teaming premiums.
Pre-Built Platform — 90-Day Deployment
Stand up an AI governance program in 90 days instead of 18 months using the AIGIP platform and pre-developed training content.
DoD-Credentialed Leadership
Principals hold CMMC Registered Practitioner credentials — a rare DoD-recognized qualification for DIB and CUI work.
Task Orders Without Open Competition
Agencies issue task orders directly against our schedule within the simplified acquisition threshold — shortening time-to-award.
Transparent Pricing
AIGIP credentialing — clear, published pricing.
Individual credential and enterprise pricing for AI governance training. Agency labor-category and engagement pricing is available via GSA Advantage and on RFQ.
Individual Credentials
All credentials include 12 months of course access, a permanent completion certificate, and a 12-month active digital badge.
| Credential | Audience | Annual Prepaid | Monthly (×12) |
|---|---|---|---|
AIGLCertified AI Governance Leader | Executive / Policy / Governance | $395 | $45/mo |
AIRMCertified AI Risk & Compliance Professional | Risk / Compliance / Audit / Legal | $495 | $55/mo |
AIPRCertified AI Professional | Practitioner / Technical | $345 | $39/mo |
AIGOVCertified Government AI Leader | Public Sector / Federal / Procurement | $595 | $65/mo |
AIILCertified AI Implementation Leader | Implementation / Cross-functional | $695 | $75/mo |
PASSAIGIP Academy Pass (All 5 Core Courses) | Full Pathway / Employer-Sponsored | $1,495 | $149/mo |
Any 2 courses
10% off
Any 3 courses
15% off
Any 4 courses
20% off
Academy Pass
Best value
Enterprise Seat Bands
Volume discounts off list price.
| Seat Band | Discount | Includes |
|---|---|---|
| 5–24 seats | 10% | Team dashboard, basic reporting |
| 25–99 seats | 15% | Admin console, cohort scheduling, manager reporting |
| 100–249 seats | 20% | SSO/SCIM option, quarterly reviews, dedicated success contact |
| 250+ seats | 25–30% | Dedicated CSM, integrations, seat pools, custom reporting (2-yr term) |
Enterprise & Agency Buyers
SSO/SCIM, admin console, cohort management, dedicated CSM, custom reporting, and seat pools for agency-wide deployments.
Contact SalesGovernance Essentials
Cross-functional governance launch (Leader + Risk + Practitioner)
From $1,051 / seat
100 seats · ~$105,100
Public-Sector
Federal / agency procurement and policy alignment
From $792 / seat
100 seats · ~$79,200
Academy Enterprise
Full workforce pathway (all 5 core courses)
$1,121.25 / seat at 250 seats
250 seats · ~$280,312
Renewals & Recertification
After year 1, choose what fits your role.
Year-2 Access Renewal
$149/yr (single course) · $249/yr (all owned)
Continued access to course materials, updates, and the learner portal for renewed credentials.
Recertification Only
$99 / credential / year
Renewal assessment that extends the active digital badge for another 12 months without full course repurchase.
Indicative Agency Engagement Roles
Indicative GSA labor categories for planning purposes only — official ceiling rates via GSA Advantage and on RFQ.
| Labor Category | Unit | Tier | Indicative Rate |
|---|---|---|---|
| vCISO | Per hour | Principal | On RFQ |
| CMMC Registered Practitioner (RP) Advisor | Per hour | Senior / Principal | On RFQ |
| AI Governance Lead — fCAIO | Per hour / engagement | Principal | On RFQ |
| Security Engineer | Per hour | Junior / Senior | On RFQ |
| GRC / Compliance Analyst | Per hour | Junior / Senior | On RFQ |
| AIGIP Instructor (Cohort) | Per cohort | Senior | On RFQ |
| Expert Witness — Cyber & AI | Per hour | Principal | On RFQ |
| Project Manager — Government | Per hour | Senior | On RFQ |
AIGIP courses are aligned to the NIST AI RMF. NIST states that the AI RMF is intended for voluntary use and does not provide certification or endorsement of framework-related services.
Past Performance
Delivered against the frameworks that matter.
Selected engagements across DoD DIB, regulated SaaS, and AI-governance pilots. A detailed past performance statement is available upon request.
Corporate Merchandiser — Manufacturer
PCI DSS audit findings reduced from several hundred to zero via SAQ D → SAQ A migration; AIGIP delivered; security posture enabled successful PE diligence.
EHS Data Platform
Achieved TX-RAMP certification; security maturity facilitated onboarding of 12 new global EHS clients; AIGIP pilot to 2 leadership personnel.
DoD Training Systems Contractor
Architected CMMC-compliant GCC High enclave protecting DoD DIB CUI; AIGIP training video generation delivered for multiple Army & Navy contracts.
Building Technology & Automation
Achieved CMMC L1 self-certification; CMMC L2 readiness underway; building GCC High enclave with CMMC-qualified MSP; AIGIP training delivered to 3 leadership personnel.
Credentials & Frameworks
Engineering compliance into every workflow.
CMMC Level 1 self-certified · CMMC Level 2 in-progress · CMMC Registered Practitioner credentialed leadership.
Huttan Risk Ecosystem
One contract, an integrated portfolio of specialized brands.
TurnkeyCyber.us
Cybersecurity, vCISO, SIEM, digital forensics, CMMC 2.0 / NIST 800-171 programs
AIGIP.ai
AI governance certification & training aligned to NIST AI RMF and OMB guidance
AIRiskPartners.ai
AI risk management, governance advisory, and executive AI education
CyberBoardTalent.com
Board-level cybersecurity advisory for agencies and regulated entities
Cybersecurity-Expert-Witness.com
Expert witness — cyber and AI litigation (CMMC, NIST 800-171)
Federal Point of Contact
Ready to issue a task order?
Contact our team directly or request a quote and we'll reply within one business day.
GSA schedule FAQ
Contract, ordering and pricing questions we hear most often from federal buyers.
What is Huttan Risk's GSA contract number?
Huttan Risk holds GSA Multiple Award Schedule contract 47QTCA23D00CX under SINs 54151AI and 874-4, with UEI FDMKYXHBDKK3 and CAGE code 8PDQ8. The contract can be verified on GSA eLibrary.
How does an agency order from the schedule?
Ordering follows FAR Subpart 8.4. An agency defines the requirement, requests a quote from Huttan Risk, receives a scoped quote against pre-negotiated ceiling rates, and issues the task order directly to the GSA contract — no separate competition process is required.
What can be purchased under the contract?
Cybersecurity and IT risk services (assessments, CMMC readiness, vCISO support, GRC deployment and managed compliance), AI risk and governance services, and AIGIP AI governance credential training and enterprise seat licensing.
Is Huttan Risk a small business or set-aside vendor?
Yes. Huttan Risk is a Veteran-Owned Small Business based in Colorado, so awards can count toward an agency's socioeconomic procurement goals. The team includes a CMMC Registered Practitioner, and the company is CMMC Level 1 self-certified with Level 2 in progress.
How is pricing determined?
Services are priced from GSA-vetted labor categories and ceiling rates published on this page. AIGIP credential training is priced per credential, with bundle and enterprise seat-band pricing available for volume purchases.
Who is the federal point of contact?
Amen Khan, Government Contract Specialist (amen@huttanholdingllc.com), and Ray Hutchins, Managing Partner (rh@cybercecurity.com, 303-887-5864). Quote requests receive a reply within one business day.