Gaurav Sengar is a cybersecurity entrepreneur running defense-grade security and compliance operations across four continents. As founder and CEO of ITSecOps, he leads a 24/7 security operations centre, a managed IT and white-label MSP practice, and a compliance consultancy spanning CMMC, NIS2, ISO 27001, SOC 2 and GDPR — serving businesses from Norway and Germany to the Gulf, India, Japan and the United States.
What he leads
- 24/7 Security Operations: a follow-the-sun SOC delivering monitoring, detection and response with sub-15-minute mean time to triage — the engine behind ITSecOps managed security, MDR and white-label MSP services (official Sophos partner).
- Compliance engineering: readiness programmes that ship controls, not just documents — CMMC Level 1/2 and NIST SP 800-171, NIS2 and GDPR in Europe, ISO 27001 and SOC 2 globally.
- Cloud & infrastructure security: Microsoft 365 and Azure architecture, migration and hardening, CUI enclave design (GCC High, FedRAMP Moderate overlays) and zero-trust rollouts.
- MSP enablement: white-label L1-L3 engineering, NOC and SOC capacity for managed service providers in the US, UK, Germany, Canada and Australia.
The USP: CMMC certification outside the United States
CMMC does not stop at the US border — the requirement follows CUI down the supply chain to subcontractors in Japan, the Gulf, Australia and Europe. These companies face problems US consultancies rarely handle: US-persons restrictions on ITAR data, GCC High architecture decisions made from abroad, evidence collection across timezones and assessors nine hours away. Gaurav built the practice that serves them in their own working day — and the free tooling the whole community now uses. No other consultancy owns this ground.
Public work
- Creator of the free, no-signup SPRS Score Calculator — all 110 NIST SP 800-171 controls with official DoD Assessment Methodology weights.
- Creator of the CMMC Cost & Roadmap Planner — the interactive “CMMC World” journey planner.
- Author of the CMMC Cost Index — annually updated cost benchmarks for eight contractor profiles, free for citation by media and analysts.
- Maintainer of the open-source NIST 800-171 SPRS scoring engine on GitHub (MIT).
- Publisher of the ITSecOps compliance answers library and the free compliance guide collection.
Talk to Gaurav
Media enquiries, podcast invitations, expert commentary on cybersecurity and defense supply-chain compliance, and CMMC cost data requests: info@itsecops.cloud — Cost Index benchmarks may be cited freely with attribution. For engagements, book a scoping call.