SEDSGA

About SEDSGA

A specialized firm for security-conscious organizations.

SEDSGA, LLC is a Georgia-based cybersecurity, governance, risk and compliance, and managed IT infrastructure company focused on financial institutions and other organizations where security has to be demonstrated, not just described.

Background

Closing the gap between technical work and governance.

Organizations held to the highest security expectations are often served by providers who handle only half the problem.

Infrastructure providers configure systems but leave the documentation to someone else. Compliance consultants write policies without verifying how systems are actually configured. The result is a program that looks complete on paper and comes apart under testing.

SEDSGA exists to close that gap. Our experience with financial institution cybersecurity and compliance shapes everything we do, from how we configure a firewall to how we write a board report. In a regulated environment, a control is only as strong as the evidence that it works.

Company profile

Legal name
SEDSGA, LLC
Headquarters
Georgia, United States
Disciplines
Cybersecurity; governance, risk and compliance; managed IT infrastructure
Founder background
U.S. Navy information technology; B.S. in Computer Science
Primary focus
Financial institutions and other security-conscious organizations
Contact
wes@sedsga.net

Founder background

Experience built in demanding environments.

SEDSGA was founded on a career that runs from military information technology through network engineering and cybersecurity administration to hands-on work with financial institutions.

That path shapes how SEDSGA works. Technical controls are approached with an engineer’s understanding of how systems behave, and governance work is grounded in direct experience with what examiners and auditors review.

U.S. Navy information technology

Information technology experience gained in the U.S. Navy, in an environment where security, reliability, and disciplined procedure are expected.

B.S. in Computer Science

A formal foundation in computer science that underpins the practical engineering and security work.

Network engineering and cybersecurity administration

Hands-on experience designing, configuring, and administering networks and the security controls that protect them.

Financial institution cybersecurity and compliance

Direct experience supporting financial institutions with cybersecurity governance, regulatory examination preparation, security controls, and audit remediation.

Technical expertise

Depth across the full technology stack.

Effective security and compliance work requires understanding how systems are built, not just how they are described.

Network and perimeter security

Firewalls, segmentation, secure remote access, and wireless security designed for least-privilege access.

Identity and access

Active Directory, Microsoft Entra ID, multi-factor authentication, Conditional Access, and privileged access.

Endpoint and server security

Hardening baselines, endpoint detection and response, encryption, and lifecycle management.

Vulnerability and patch management

Risk-based remediation programs with tracking and reporting that show progress over time.

Backup, recovery, and resilience

Ransomware-resistant backup design, disaster recovery planning, and documented recovery testing.

Governance and frameworks

NIST CSF 2.0, the FFIEC IT Examination Handbook, risk assessments, policy development, and board reporting.

Service philosophy

The principles behind the work.

  1. Security is an engineering discipline.

    Good security outcomes come from well-built systems, not from documents alone. We start with how things actually work.

  2. Documentation must match reality.

    A policy that describes controls you don’t have is a finding waiting to happen. We keep the two aligned.

  3. Proportionate, not maximal.

    Controls should fit the size, complexity, and risk profile of the organization. We recommend what is warranted, not everything that is possible.

  4. Risk decisions belong to management.

    We provide clear analysis and options. Leadership makes informed decisions about which risks to accept, mitigate, or transfer.

  5. Candor over comfort.

    We report what we find, including when the answer is not what anyone hoped to hear.

Clarity

What SEDSGA is, and what it is not.

Being clear about our role helps you make good decisions about the partners you rely on.

SEDSGA is

  • An independent cybersecurity, GRC, and managed IT infrastructure firm
  • A hands-on technical partner that implements as well as advises
  • Focused on financial institutions and other security-conscious organizations
  • Committed to defining scope, responsibilities, and availability in writing

SEDSGA is not

  • Affiliated with, certified by, or endorsed by any regulatory agency
  • A law firm. We do not provide legal advice.
  • A substitute for your independent auditors
  • A 24/7 security operations center

Next step

Let’s talk about your environment.

Whether you need a technical partner, a governance program, or both, a short conversation is the best place to start.

Contact SEDSGA