Skip to content
Context GRC

About

Scott Klauminzer, founder of GoEvolve

35 years in information technology and security, with direct work on the standards that utilities are audited against.

Portrait of Scott Klauminzer

Why Context GRC

Context GRC is an automation-first compliance platform built for NERC CIP entities and smaller utilities, to help them both preserve and produce business value. It preserves value with a secure, local architecture that keeps sensitive data inside your network by default, and guards against compliance drift. It produces value by acting as a force multiplier for lean staff, automating compliance work so teams can spend more of their hours on reliable, secure grid operations.

Standards and industry work

  • NERC Project 2023-09

    Risk Management for Third-Party Cloud Services

    Drafting team member
  • NERC Project 2022-05

    Modifications to CIP-008 Reporting Threshold

    Drafting team member
  • NERC Project 2016-02

    Modifications to CIP Standards (Virtualization)

    Former participant
  • NERC Project 2025-02

    Modifications to CIP Standards

    Former participant
  • Member, NERC Reliability & Security Technical Committee
  • Member, Electricity Subsector Coordinating Council (ESCC) Senior Executive Workgroup on Cybersecurity
  • Represented public power in the NIST Cybersecurity Framework development process
  • Contributor to the U.S. DOE Cybersecurity Capability Maturity Model (C2M2) v2
  • Contributor to ISO/IEC 27019:2017, the ICS information security controls framework

Education and community

  • Master's degree in Cybersecurity and Leadership, University of Washington
  • University of Washington Tacoma School of Engineering and Technology Advisory Board, 13 years

Away from the keyboard, Scott coaches and paddles outrigger canoes and spends time outdoors with family.

About GoEvolve

The GoEvolve brand dates back more than 25 years as an independent technology and security venture. After a long pause, it was revived to build Context GRC: a compliance platform made for the people who actually run electric utilities.

GoEvolve LLC is a founder-led company based in Washington State. That keeps decisions close to the product, and it is why the license agreement addresses continuity directly.

Standards participation reflects the founder's individual service. Context GRC is a GoEvolve product and is not affiliated with, endorsed by, or approved by NERC, the ESCC, DOE, NIST, or any employer.

Trust & Security

Built to be inspected

Designed to support your programs. It does not confer certification.

  • Air-gap ready

    Containerized on-prem or private cloud. Every front-end library is vendored locally with documented licenses and SHA-256 manifests, so there are no runtime CDNs.

  • Credentials & MFA

    PBKDF2-HMAC-SHA256 at 600,000 iterations, a NIST SP 800-63B passphrase policy, and TOTP multi-factor authentication.

  • Secrets

    Integration credentials are Fernet-encrypted with a rotation script. Secrets are injected through Docker secrets.

  • Transport & ledger

    TLS between services and a hash-chained, tamper-evident audit ledger of recorded actions.

  • Worker isolation

    Ed25519-signed task envelopes, a least-privilege worker database role under row-level security, pre-persistence DLP screening, and fenced untrusted document text in prompts.

  • Access control

    Role-based access with per-context role grants, and context-scoped views and roles.

  • Supply chain

    177 exact-pinned packages with about 3,000 SHA-256 hashes. CI gates: Bandit, TruffleHog, pip-audit --strict, a copyleft license gate, and Trivy.

  • Attributable approvals

    AI-proposed controls, mappings, and actions are staged for a named, authenticated reviewer to approve across four triage touchpoints, with the decision recorded. Cmd+K opens the command palette.

Licensing

  • Licenses are Ed25519-signed tokens verified locally, with no phone-home.
  • Tiers are set by the number of contexts and internal users.
  • Free Auditor: auditor accounts never consume a seat.
  • After a 14-day grace period the platform moves to a read-only archive. It never locks you out of your records.