Trust Center

Security Overview

Last updated: June 27, 2026

Welcome to the TD Watts Consulting Trust Center. This Security Overview provides transparency into how we protect our systems, data, and client information. Security is foundational to our mission as a trusted government and commercial consulting partner.

Security Commitment

We align our security practices with the NIST Cybersecurity Framework and maintain compliance with applicable federal requirements including NIST SP 800-171 for CUI.

1. Infrastructure Security

Cloud Infrastructure

Hosted on enterprise-grade cloud platforms with regional redundancy and availability.

Network Security

Firewall, intrusion detection/prevention, and network segmentation to protect critical assets.

Encryption

TLS 1.2+ for data in transit and AES-256 for data at rest where sensitive information is stored.

Access Management

Role-based access control, least-privilege model, and multi-factor authentication for all administrative access.

2. Data Protection

Data classification and handling procedures aligned with CUI requirements where applicable.
Regular data backups with tested restoration procedures.
Secure data disposal and media sanitization in accordance with NIST SP 800-88.
Data retention policies as described in our Records Retention Statement.

3. Compliance & Certifications

NIST SP 800-171

CUI safeguarding controls implemented for federal contract requirements.

FAR Compliance

FAR 52.204-21 basic safeguarding controls implemented.

NIST CSF

Aligned with the NIST Cybersecurity Framework (Identify, Protect, Detect, Respond, Recover).

CMMC Readiness

Maintaining readiness for Cybersecurity Maturity Model Certification requirements.

4. Security Monitoring & Detection

Continuous monitoring of systems and networks for security events.
Centralized logging and security event management.
Regular vulnerability scanning and penetration testing.
Timely security patching and remediation of identified vulnerabilities.

5. Incident Response

We maintain a documented incident response plan with defined roles, responsibilities, and procedures. In the event of a security incident affecting client data, we follow established protocols for detection, containment, eradication, and recovery, and we notify affected clients and authorities as required by contractual and legal obligations.

6. Personnel Security

Background checks for personnel handling sensitive or government data.
Security awareness training upon hire and annually thereafter.
Signed confidentiality and acceptable use agreements for all personnel.
Security role-based training for personnel with elevated access.

7. Vulnerability Reporting

We welcome responsible disclosure of security vulnerabilities. Please review our Responsible Disclosure Policy for reporting guidelines. Report vulnerabilities to security@tdwatts.com.

8. Security Inquiries

For security-related questions, compliance documentation requests, or vendor security assessments, contact us at security@tdwatts.com. We work with clients to complete security questionnaires and due diligence assessments under appropriate confidentiality protections.