Thirty years in the field.
All of it in the work.
Richard Reddington began his compliance career over 30 years ago working directly within the Department of Defense during the era of the Rainbow Series — the foundational NCSC security evaluation criteria that predated modern risk management frameworks. He oversaw framework transitions on major Category I programs, navigating the full arc from DITSCAP through DIACAP to the current DoD RMF.
Before leaving federal service, Richard served as director of a DoD-certified NSA Red Team — one of the most operationally demanding roles in government cybersecurity assessment. That background in adversarial testing and control assessment informs every page of the RampReady catalog.
Today he performs gap assessments and audits across all major commercial compliance frameworks, including CMMC, FedRAMP, SOC 2, PCI DSS, and DoD RMF. The RampReady field manuals are the reference materials he always wished existed — written for practitioners who need to do the work, not just understand the theory.
Published under the pen name Ramp Ready to maintain professional independence from employers and client relationships.