COACT, Inc. logo

COACT, Inc.

Columbia, MD·Founded 1990·FedRAMP-recognized since 2016
Impact level not listed
1990Year founded
2016FedRAMP-recognized since
0Products currently assessing
#38 of 48Rank by active volume

About COACT, Inc.

COACT, Inc. is a Service-Disabled Veteran-Owned Small Business (SDVOSB), founded in 1990, that supports commercial and government clients in understanding and fulfilling their risk management and compliance needs. COACT evolved into a leading provider of high-reliance Governance, Risk, and Compliance (GRC) services across multiple compliance frameworks. For over 30 years, COACT has provided consulting, Independent Verification & Validation (IV&V), and assessment services to both government and commercial clients. Our tiered service offerings range from focused efforts to address specific security objectives, to providing full information security programs for clients in the commercial, healthcare, regulatory, defense, and intelligence domains. With unrivaled ethics, COACT remains free from real or perceived conflicts of interest and does not engineer, manufacture, or resell any products. COACT is able to perform FedRAMP consulting and assessment services to meet the needs of new and existing cloud service offerings. Our team of qualified assessors are available to assess cloud systems and continuously monitor the security posture of those systems in accordance with FedRAMP requirements. The output of our assessment services will provide the information needed to make critical risk-based decisions and demonstrate compliance with FedRAMP. COACT utilizes proven assessment methodologies and an accredited Quality Management System to ensure testing is targeted, effective, and produces actionable information for Authorizing Officials and other stakeholders.

This firm shows no currently active assessments in the Marketplace export. That's common for firms that are newly recognized or whose federal work isn't yet reflected in this dataset — it isn't necessarily a signal about capability.

Frameworks and adjacent accreditations

Beyond FedRAMP, the Marketplace export lists this firm as offering assessment or certification services for:

StateRAMP - Consulting and AssessmentsFISMA - Consulting and AssessmentsHIPAA (Covered Entities and Associates) - Consulting and AssessmentsNIST SP 800-53 Compliance and AssessmentsNIST SP 800-171 Compliance and AssessmentsLimited Access Death Master File - Consulting and Assessments