Crane Consulting and Technology Solutions: Compliance Statement

Draft for Robert Looper Review and Approval 

10/15/26

As demonstration of its commitment to adhering to the highest standards of Compliance and Cybersecurity safety, Crane Consulting and Technology Solutions has launched its Multi-Standard Compliance initiative.
During the first phase of this initiative; the goals are to achieve organizational Alignment and Compliance with NIST AI RMF and EU AI Act as a first step.
At the product level, the goals are to achieve alignment and compliance with NIST SP 800-218 (Secure Software Development Framework) and NIST SP 218A (Secure Software Development Practices for Generative AI and Dual-Use Foundation Models) and OWASP Secure Coding Practices of its Global AI Risk (GAIR) Platform.
Once the goals of this first phase are achieved; the organization will pursue alignment and compliance with other AI and Cybersecurity Standards/Frameworks as well as maintain ongoing alignment and compliance with Standards achieved during the first phase.
Crane is undertaking this initiative because it understands its responsibility to adhere to the highest AI and Cybersecurity standards in order to safeguard its customers and provide the highest quality advisory services as it relates to helping them implement and achieve these same Standards/Frameworks.

Thank You,
Robert W. Looper

Chief Compliance/Security Officer 
Crane Consulting and Technology Solutions