{
  "$schema": "https://fedramp.gov/schemas/fedramp-advisor-information-schema-2026-06-24.json",
"advisorName": "Landers and Company",
"logo": "https://landersandcompany.com/wp-content/uploads/2023/01/logo-removebg-preview.png",
  "serviceDescription": "Landers and Company is a small technology, management, and strategy consultancy founded in 2011 with the primary focus of providing strategic guidance and implementation support for information security and continuous monitoring programs for Cloud Service Providers (CSPs) offering their services to the Federal Government. The team helps CSPs navigate the FedRAMP 2026 Rules transition (including those already certified under Rev5), gap assessments, automated tooling for required inputs, assessment preparation, ongoing vulnerability evaluation and reporting, and advisory support for significant changes and certification class changes.",
  "contactInformation": [
    "Email: info@landersandcompany.com",
    "Web: https://www.landersandcompany.com/contact/",
    "LinkedIn: https://www.linkedin.com/company/landers-and-company-lc/"
],
  "servicesOffered": [
    {
      "serviceName": "FedRAMP",
      "serviceDescription": "Support through all phases of FedRAMP certification, including transitioning to the new FedRAMP 2026 Rules, gap assessments prior to beginning the FedRAMP journey, setting up automated tools to deliver required inputs, assessment preparation, ongoing vulnerability evaluation and reporting, and advising on significant changes or certification class changes."
    },
    {
      "serviceName": "Continuous Monitoring",
      "serviceDescription": "Ongoing continuous monitoring support for FedRAMP-authorized cloud service offerings, including monthly submission quality control, vulnerability scan analysis, VDR/VER management, and inventory validation."
    },
    {
      "serviceName": "DISA/DoD IL4, 5, 6",
      "serviceDescription": "Advisory support for Department of Defense Cloud Computing Security Requirements Guide (SRG) authorizations at Impact Levels 4, 5, and 6."
    },
    {
      "serviceName": "GovRAMP",
      "serviceDescription": "Advisory support for organizations pursuing or maintaining GovRAMP (formerly StateRAMP) authorization."
    },
    {
      "serviceName": "CMMC",
      "serviceDescription": "Advisory support for Cybersecurity Maturity Model Certification (CMMC) V2 readiness across certification levels."
    }
  ],
  "customerReferences": [
    "\"Landers and Company has been instrumental in the success of our FedRAMP program. We engaged them midway through our authorization process due to early documentation challenges. They reviewed and applied their expertise to improve our FedRAMP package documentation ultimately helping us achieve our FedRAMP Moderate JAB ATO. Early in our engagement we quickly came to appreciate that they offered much more than documentation support. Their deep experience coupled with their ability to understand our system led us to re-engage them to advise on significant changes, architecture improvements, and to assist us with navigating our authorization with the FedRAMP JAB, PMO, and our 3PAO. We are excited to be working with them yet again as we continue on our path to FedRAMP High.\" - Geoff Kershner, former Chief Security Officer, Medallia"
  ]
}

