BiModal Group
DevSecOps, Security, and Compliance consultants for businesses with demanding requirements to meet operational efficiency and security program maturity.
 
Our Services
We offer a wide range of services in creative spheres. Here is what we can offer to your company:
DevSecOps
If your company would like to address efficiency issues or tackle short to medium-term projects, our team of experts can guide you through this process. Whether it would be migrating from your bare metal datacenter to AWS/GCP/Azure, or applying our breadth of knowledge to your CI/CD pipeline, or automation of repeatable tasks of microservices (e.g Kubernetes), or exacting new security controls or requirements, or bridging technical controls to compliance, or simply augmenting your staff, we can be your service delivery partner.
Compliance
Whether it be SOC2, ISO 27001, ISO 9001, TISAX, PCI, CMMC, NIST, HITRUST, HIPAA, GDPR, CCPA, etc. we got you covered. We have extensive knowledge and experience to assist any sized company in building out a security program from beginning to end, having helped achieve 100% certification success rates across all of our clientele. We can also conduct Internal Audits, Gap Assessments, and training. Focus on your business and allow us to help guide you through all of your compliance, privacy, and data protection needs.
Offensive Security / Application Security
Any internal/external application or weak network defense is a gateway for threat actors to compromise and gain access to your sensitive data. Whether it be black or gray boxes or cloud security assessments (e.g. AWS, GCP, Azure), we provide external vulnerability and penetration testing services to mitigate these risks by employing industry standards (OWASP ASVS). We can also be your extended service partner for threat and vulnerability management throughout the lifecycle by actively engaging with your functional teams, including providing Secure Code training.
Security Consulting
When the need for an in-house security expert arises, you can look to BiModal for your virtual CISO/CSO needs. We can support your company on the sales front with customer security calls, or with security questionnaires that often consume a substantial amount of time from your teams, or with risk assessments and security architecture review, or with reviewing legal contracts as it pertains to security. BiModal also has experts in SIEMs, such as Splunk. Our services do not end there. Reach out to us to see how we can help.
Networking Support
As more companies adopt a hybrid or exclusive cloud environment, our team of highly proficient Engineers (CCIEs, JNCIEs, VMware certified) can help you design, support, and build (architect) those virtualized scale out/scale up data centers, SD-WANs, optimizing security and interoperability between devices, networks, and multi-cloud vendors. We can support Cisco, Juniper, Palo Alto, Fortinet, Checkpoint, VMware, Citrix, just to name a few.
Project Management
Our PM team forms an integrated system to enable successful delivery of the project and intended outcomes. Main goal for our leadership is based on the Agile principles and activities that are critical for the effective delivery of project outcomes.
About us

We founded our company in Redwood Shores, CA based on our desire to fill the gaps that we have seen across the industry. Our combined experience of 40+ years in technology and management of IT services has positioned us to help you identify and alleviate your pain points.

Trusted by our clientele, ranging from small startup up tech to mature fortune 100 companies, we deliver on quality and capabilities. Let our teams of highly qualified professionals focus on the foundations, while you focus on your products.

Darren Nguyen is the founder and CEO of BiModal Consulting Inc. He leads the overall strategies of the DevOps, Security and Compliance teams to ensure high levels of success and client satisfaction. He helped found BiModal Consulting Inc, on the belief that many consulting firms were over promising and under delivering. The core principle of success should be senior experience with high communications and fast velocity.

He has over 20+ years of experience in managing datacenters and teams for companies in Silicon Valley. He has worked for companies such as NetSuite, Hotwire, Uber, Genentech, and Good Technology. He was responsible for building datacenters with 99.999% uptime, ensuring security, and meeting strict compliance requirements.

During his experience, he was involved in many audits such as SOX, SOC I and II, HIPAA, PCI-DSS, and ISO 27001. He has helped 3 companies through either IPO or acquisition.

He holds a bachelor degree from the University of California, Riverside with a major in Business Administration and emphasis in Management Information Systems.


Darren Nguyen

CEO
Roshan Naik is a partner at BiModal Consulting Inc and leads the Devops team in helping clients with their Infrastructure automation in Cloud and onPrem, Big Data engineering setup and mission critical application deployments. With years of experience in managing small to large scale mission critical applications handling millions of transactions, he has a thorough understanding of the Web2.0 design, implementation and monitoring. His current passion is Web3.0 blockchain technologies and has strong experience with its implementation.

He has been working in the Bay Area for the last 20 years and worked for various startup and enterprise companies during these years. Before partnering with BiModal he was Managing a team of Systems Engineers at Motorola, which was eventually bought by Google. Started as an engineer building the first Data center for the Motorola Android based phone, he eventually built a team of engineers managing around 5000+ servers across 5 data centers around the globe.

He holds a Bachelor's degree from Goa Engineering College, India and is very passionate about technology.

Roshan Naik
Partner
Will Liu is a partner at BiModal Consulting Inc. He leads the Security and Compliance teams in helping companies with security certification objectives, information security program buildout, CISO/CSO responsibilities, application security, and risk management. By bridging the communication gap between technical teams and compliance expectations, clients can focus on their core competencies without compromising regulatory, statutory, and external commitments.

He has over 20+ years of tech experience, beginning at Sun Microsystems, with progression at several startups, and then into the satellite broadcasting security industry at Cisco Systems. By compounding his experience starting with Unix/linux infrastructure environments, he gradually shifted to networking, SAN management, security and compliance. With this broad knowledge of production and engineering environments, security and compliance became a natural fit.

Currently, he leads a senior team of consultants helping clients achieve a perfect record of 100% ISO 27001 certification. He is also well versed in the delivery of SOX, SOC II, HIPAA, PCI-DSS, CMMC, NIST CSF, HITRUST/HITECH, FedRAMP compliance.

He holds a bachelor of science degree from the University of California, Irvine. His passion for continuous learning is shown in his certifications: CCISO, CISM, CISSP, CRISC.

Will Liu
Partner, Compliance

Why Partner with BiModal Group for Internal Audits


Deep Technical Expertise & Business Acumen
Our internal audit team brings a unique combination of technical security knowledge and business understanding. We don't just check boxes – we provide strategic insights that help strengthen your security posture while supporting your business objectives.
Risk-Based Approach to Compliance
Our methodology goes beyond simple compliance checking. We:
  • Assess your specific threat landscape and risk profile
  • Prioritize controls based on your business context
  • Provide actionable recommendations aligned with your risk tolerance
  • Help optimize your security investments
Comprehensive Audit Coverage
Our internal audit program covers all critical aspects of ISO 27001, SOC2, PCI, HIPAA, NIST, etc.:
  • Information Security Management System (ISMS) effectiveness
  • Risk assessment and treatment processes
  • Control implementation and operational effectiveness
  • Documentation and record-keeping practices
  • Management review and continuous improvement
Value-Added Benefits
Working with us delivers additional advantages:
  • Gap analysis before formal certification audits
  • Knowledge transfer to your internal teams
  • Best practice recommendations from across industries
  • Support in developing corrective action plans
  • Regular updates on emerging threats and compliance changes
Efficient & Collaborative Process
Our streamlined audit approach:
  • Minimizes business disruption
  • Work within your availability of resources and practices
  • Provides clear communication channels
  • Ensures transparent reporting
  • Offers flexible scheduling options
Long-Term Partnership Focus
We invest in understanding your business to:
  • Enact security and compliance discipline
  • Build institutional knowledge over time
  • Provide year-over-year trending analysis
  • Identify improvement opportunities
  • Support your long-term security maturity goals
  • Act as trusted advisors for your security program
Certification Readiness
Our internal audit services help ensure you're prepared for:
  • ISO 27001, FedRAMP, CMMC certification
  • SOC2, PCI compliance
  • Surveillance audits
  • Other complementary standards (ISO 27701, 22301, 9001, SOC 2, etc.)
Quality Assurance
Our commitment to excellence includes:
  • Certified lead auditors with extensive experience (e.g., ISO 27001 Lead Auditor, ISO 27701 Lead Auditor, etc.) leading internal and external audits
  • Rigorous quality review processes
  • Consistent methodology and documentation
  • Regular auditor training and development
  • Industry best practice alignment
FEEL FREE TO CONTACT US
info@bimodalconsulting.com
+1-678-835-221