Egan Rose Consulting LLC

25/05/2026

07/04/2026

Urgent wake-up call for CMMC readiness! ⏱️

Prime contractors are already getting proactive, imposing tough certification mandates on their suppliers.

With new requirements kicking in next November, the time to act is NOW.
Are you prepared for the CMMC blind spot threatening your business?
Prime contractors recognize the need for a robust, compliant supply chain. But responses from their partners vary widely. Some understand and are addressing the new rules, while others are still playing catch-up.
Delayed action means compressed timelines and higher costs to achieve compliance.

As of November 2025, CMMC self-assessments are now mandatory for contract awards. Over 1,000 Level 2 assessments were already completed - double the original DoD projection! Subcontractor CMMC certification is becoming table stakes to maintain credibility and contracts with primes.

Fortify your supply chain and pipeline with Egan Rose Consulting. Many smaller firms are struggling to keep up. Don't let your business get left behind.

What's your plan to ensure CMMC readiness? Let's discuss and solution together.

30/03/2026

https://www.instagram.com/reel/DWhI5P_CXx3/?igsh=OGg3ZGZiZWFxNmM=

18/03/2026

I was catching up on some GovCon content this week — a great breakdown on federal contract vehicles — and it sent me down a rabbit hole I haven't been able to stop thinking about.

We talk a lot in risk management about the big exposures. Labor violations. Supply chain failures. Security breaches. But there's a quieter risk that shows up first — especially for small business owners trying to compete in the federal market — and almost nobody names it.

It's called information asymmetry. And when you map it against psychosocial risk research, the picture gets uncomfortable fast.

Here's what I mean:

Small business owners don't have dedicated BD teams, proposal writers, or compliance counsel on staff. The owner is usually all three, while also running day-to-day operations. So when you add a steep information gap on top of an already stretched capacity, three things happen in sequence:

First, effort-reward imbalance kicks in. You invest hundreds of hours on a proposal that was never a fit — because you couldn't decode the delivery requirements before you started. That's not a strategy failure. That's a system problem.

Then perceived control starts to erode. When you can't make informed decisions because the information isn't accessible to you, anxiety and disengagement follow. This is well-documented in occupational health research — and it shows up as burnout long before it shows up on a balance sheet.

And underneath all of it runs what I call chronic vigilance. The constant, low-grade mental tax of not knowing what you don't know. What am I missing? That hum never fully stops — and it is a real capacity drain.

To the contracting officers in my network — you want capable vendors at the table. Regulatory complexity works against that goal too. When small businesses submit non-compliant proposals not from lack of capability but from lack of access, everyone loses time.

This is why I believe empathy is a performance metric.

The federal market isn't a secret society. It wasn't designed to exclude anyone. But complexity without access creates the same effect.

Learn the rules. Manage the risk. Scale your impact.

I'm curious — for those of you who have navigated federal contracting as a small business, what was the steepest part of the learning curve? What do you wish someone had told you earlier? Let's talk in the comments. 👇

18/03/2026

I was catching up on some GovCon content this week — a great breakdown on federal contract vehicles — and it sent me down a rabbit hole I haven't been able to stop thinking about.

We talk a lot in risk management about the big exposures. Labor violations. Supply chain failures. Security breaches. But there's a quieter risk that shows up first — especially for small business owners trying to compete in the federal market — and almost nobody names it.

It's called information asymmetry. And when you map it against psychosocial risk research, the picture gets uncomfortable fast.

Here's what I mean:

Small business owners don't have dedicated BD teams, proposal writers, or compliance counsel on staff. The owner is usually all three, while also running day-to-day operations. So when you add a steep information gap on top of an already stretched capacity, three things happen in sequence:

First, effort-reward imbalance kicks in. You invest hundreds of hours on a proposal that was never a fit — because you couldn't decode the delivery requirements before you started. That's not a strategy failure. That's a system problem.

Then perceived control starts to erode. When you can't make informed decisions because the information isn't accessible to you, anxiety and disengagement follow. This is well-documented in occupational health research — and it shows up as burnout long before it shows up on a balance sheet.

And underneath all of it runs what I call chronic vigilance. The constant, low-grade mental tax of not knowing what you don't know. What am I missing? That hum never fully stops — and it is a real capacity drain.

To the contracting officers in my network — you want capable vendors at the table. Regulatory complexity works against that goal too. When small businesses submit non-compliant proposals not from lack of capability but from lack of access, everyone loses time.

This is why I believe empathy is a performance metric.

The federal market isn't a secret society. It wasn't designed to exclude anyone. But complexity without access creates the same effect.

Learn the rules. Manage the risk. Scale your impact.

I'm curious — for those of you who have navigated federal contracting as a small business, what was the steepest part of the learning curve? What do you wish someone had told you earlier? Let's talk in the comments. 👇

13/03/2026

Ever wondered if Small Businesses can keep pace with the DLA’s AI-driven supply chain demands?

The gap isn’t just technical; it’s a structural readiness gap.
While Prime contractors focus on rigorous oversight and automated systems, many Small Businesses are still navigating the transition to a "Digital Thread" and complex DoD standards. Under FAR 52.219-9, every major contract must provide maximum practical opportunity to small businesses, but that opportunity is often unintentionally blocked by a mismatch in functional maturity.

At Egan Rose Consulting LLC , we’re bridging this gap by aligning Small Business challenges with DLA Compliance Needs through a unique, human-centered lens.

Small Business Challenges:
🛑 Resource Constraints: Bridging the budget gap to meet high-level vendor compliance.
🛑 Compliance Gaps: Navigating the web of cybersecurity (CMMC) and quality management.
🛑 Risk Exposure: Moving beyond limited TPRM to robust, defensible security postures.

The DLA Compliance Reality:
🔩 Rigorous Oversight: Strict adherence to DoD GRC frameworks.
🔩 AI Integration: Demonstrating data analytics and cybersecurity readiness.
🔩 Ethical Standards: Non-negotiable compliance with CSDDD and UNGP frameworks.

The Egan Rose Difference:
Our GRCaaS solutions don't just monitor data; they stabilize the human capital that powers mission-critical operations. We address psychosocial risk factors directly, ensuring that your team, not just your tech, is audit-ready and executable.

From $50K to $3M engagements, we deliver technology-enabled support to integrate partners into DLA's mission-critical operations.

Let’s ensure small businesses aren't just surviving, but thriving alongside DLA’s AI initiatives. How can we help you achieve federal contracting success?

03/03/2026

Are you ready to strengthen DLA supply chain resilience in the face of contested logistics? At Egan Rose Consulting, we know that adversaries targeting global networks create critical vulnerabilities in multi-domain operations, as highlighted by recent DoD reports. Let’s tackle this challenge head-on with actionable steps to build resilience and stay compliant.

Here’s how to get started:

1. Assess Your Supply Chain Risks: Begin by mapping your global network to identify weak points. Focus on geopolitical and adversarial threats that disrupt logistics. Tip: Don’t overlook third-party dependencies; they’re often the first targets.

2. Adopt a Human-Centered Framework: Implement strategies grounded in psychosocial safety science, like our Human-Centered Risk Management Framework powered by EmpathyIQ™. This approach anticipates human-driven disruptions and builds trust across teams. Warning: Ignoring psychosocial factors can amplify operational risks.

3. Align with Compliance Standards: Ensure your processes meet CSDDD Articles 5 to 11, ISO 45003:2021, and UNGP Pillars 2 and 3. Our expertise in UFLPA, CSDDD, and CSRD compliance helps you stay audit-ready while addressing DLA’s contested logistics pain points. Tip: Start small with a compliance gap analysis.

4. Integrate Technology for Scalability: Use tech-enabled solutions to scale risk management efforts, whether your engagement is $50K or $3M. Our tools streamline Supply Chain Risk Management and Critical Infrastructure Resilience. Tip: Test systems under simulated adversarial scenarios.

5. Partner with Experts: Collaborate with a team holding credentials like CTPRP, CRCMP, and PMP, backed by advanced degrees in Jurisprudence and Cybersecurity (D.Sc.). We deliver tailored Program Ex*****on, Modernization, and Business Continuity plans.

Take the first step today to safeguard your supply chain. Drop a comment or DM us to discuss how Egan Rose Consulting can support your DLA mission with Operational Risk Management Audit Readiness and beyond.

28/02/2026

Black History month strong! Run Jasmine Run!

24/02/2026

Psychosocial risk governance isn’t real until you have evidence of enforcement.

Over the last year, I have been very deliberate in my approach to building governance systems that center the human in human capital. Why? Because I believe empathy is an organizational capability, not just a sentiment — and it deserves the same governance rigor we give every other material risk.This is why I built EmpathyIQ™.

EmpathyIQ™ makes human judgment traceable and defensible—with integrated human rights due diligence and trauma-informed safeguards—especially under ISO 45003.

EmpathyIQ™ is delivered through three channels, each available independently:

EmpathyIQ™ SaaS Platform — Creates audit-ready evidence trails for psychosocial risk governance: classification, escalation, and traceability. Built with role-based access, mathematical anonymity enforcement, non-compensatory severity scoring, and exportable documentation. Now accepting early adopter applications. Link in the comments.

EmpathyIQ™ Strategic Consulting — Designs and embeds psychosocial risk governance frameworks aligned with human rights due diligence and enterprise risk management. Engagements include readiness diagnostics, HRDD system builds, and ongoing advisory.

EmpathyIQ™ Training & Advisory — Keynotes, executive governance briefings, and structured training on psychosocial risk.

Governance infrastructure—structured, traceable, and defensible.
EmpathyIQ™ makes human judgment auditable.

For Inquiries: [email protected].

24/02/2026

Over the past 6 months, I completed the Blue Wave Supplier Development Program, an American Petroleum Institute initiative, recognized and used by organizations such as Exxon, BP, and CenterPoint Energy, sponsored by Quanta Services.

Result: Egan Rose Consulting earned the program’s highest designation after validation across seven pillars:

HSSE
Cyber Security
Quality
Corporate Policies
Financials
Technical Capabilities
ESG Governance
This wasn’t credential collecting. It was strategic positioning.

Just as important: it was community-building. The energy sector runs on trust—shared lessons learned, peer-to-peer accountability, and relationships that make ex*****on tighter when the work gets complex. Blue Wave strengthened that network in a way I genuinely value.

And here’s the differentiator: strong governance and human-centered leadership aren’t competing values. In federally funded and highly regulated environments, “good intentions” don’t hold up—controls, escalation paths, and evidence trails do.

If you’re planning an energy infrastructure project and need governance that’s practical (not performative)—risk, controls, escalation, and documentation that stands up in an RFP and an audit—let’s connect.