Guided SPRS · Most popular
Your SPRS score, done with you.
The done-with-you Brehon tier for teams that want an expert in the room. You get the platform and the workflow, plus weekly sessions with David to collect evidence, score controls, and build a POA&M that holds up.
The call is a 30-minute fit check. No pressure, no obligation.
Who it's for
For the team that wants it done with them, not handed a login.
You have a Phase I award or a proposal on the line and a real deadline. You could work the controls alone, but you would rather have a CISSP and CISM walking each step with you so the score is right the first time and the POA&M survives a contracting officer's read.
What's included
- Everything in the SPRS Sprint. Full platform access, the 110-control workflow, and SSP / POA&M / SPRS score export.
- Weekly 60-minute working sessions. We work the assessment together, on a cadence that hits your deadline.
- Hands-on evidence collection support. We help you find, name, and attach the evidence each control actually needs.
- POA&M strategy review. A defensible plan for the gaps you cannot close before submission, scored the way an assessor expects.
- A direct Slack channel with David. Questions between sessions get answered, not queued.
How it works
- 1
Qualification call
A 30-minute fit check. We confirm your scope, your deadline, and that Guided SPRS is the right tier before you commit a dollar.
- 2
Weekly working sessions
We move through the 110 controls together, collect evidence as we go, and keep a running scorecard so you always know where you stand.
- 3
Review, score, and export
We pressure-test your scoring and POA&M, then you export your SSP, POA&M, and SPRS score, ready to post.
What you walk away with
A defensible NIST 800-171 self-assessment you did not have to figure out alone: an SPRS score you can stand behind, a System Security Plan, a Plan of Action and Milestones, and the audit trail that backs all three, plus the working knowledge to maintain it after the engagement ends.
From the founder
Why I built this.
I'm David Moline. By day I run cybersecurity for a DoD contractor in Stuttgart, where I've spent the last several years watching small defense businesses get crushed by compliance requirements they had three months to figure out. I hold CISSP and CISM, I'm finishing graduate work at Johns Hopkins in generative and agentic AI, and I built Brehon because I kept seeing the same problem from the inside: the small business does not need a six-figure consulting engagement. It needs a tool that knows what to ask and what to do with the answer.
Brehon is that tool.
David A. Moline Founder, Solas AI
Questions
Guided SPRS, specifically.
How is this different from the SPRS Sprint?
The Sprint is self-guided: you get the platform and one review call. Guided SPRS puts David in weekly working sessions with you, helps you collect the evidence, and adds a direct Slack channel. Same deliverables, far more hands-on.
Who actually does the work?
It is done with you, not for you. You stay in control of your evidence and your decisions; we provide the workflow, the expertise, and the second set of eyes so nothing is missed or overstated.
Can we hit a hard submission deadline?
That is what the weekly cadence is for. We set the session schedule backward from your deadline at the qualification call, so the timeline is built around your date, not ours.
What if we need a formal C3PAO assessment later?
That is the Phase II Readiness tier: C3PAO matchmaking, a mock assessment, and post-assessment support. Many teams start with Guided SPRS and step up when a Phase II topic is in sight.