Hi there, thank you for visiting my profile. 

Are you looking to: 

✅ Build a security program for your growing business? 

✅ Comply with government regulations for privacy and data security? 

✅ Assess your current security program and identify gaps in best practice? 

✅ Develop a risk-centric approach to security spending and plan of action? 

✅ Get better visibility into your security posture? 

😡 Cyber security can feel overwhelming. 

😡 Cyber security programs can needlessly burn precious capital. 

I've been solving these cyber risk problems for clients for over 20 years. I've held cyber risk and consulting positions at companies like Symantec, RSA Security, and IBM Global Services. I have a very strong technical background which I'm constantly practicing and improving. 

Perhaps the greatest differentiator I can bring to your project is the combination of this deep technical domain expertise with extensive business and general management experience. 

One of the greatest challenges for business clients of security consultants is the huge gap that exists between the two roles. The security consultant doesn't understand the business and vice versa, the business owner doesn't understand the language of cyber security. This often results to break downs in communications, poor expectation setting, and disappointing results. 

The most critical reason projects fail is: 

1. Poor quality expectation setting in the scope, tasks, and timeline. 

2. Freelancers submitting proposals for projects that aren't their core expertise and passion. 

My passion is working with small to medium business owners. 

I only accept projects I know align with my experience and passion where I can consistently deliver exceptional outcomes for clients. 

I have experience with:

✅ NIST SP 800-53, SP 800-181

✅ ISO 27001 (and the ISO family of cyber standards)

✅ NIST CSF 

✅ NIST RMF 

✅ NIST 800-171 

✅ CIS Controls 

✅ HECVAT 

✅ PCI 

Why am I qualified? 

👉🏼 Certified CISSP since 2004 

👉🏼 I was previously billed out to Fortunate 500 clients at USD$350 per hour. 

👉🏼 Over 20 years of experience in cyber risk consulting. I know how to avoid the pitfalls of client projects. 

👉🏼 I'm an alumnus of Harvard Business School so I know how to balance security with business. I value partnerships and long-term relationships over transactional relationships. I only accept client projects where I know I can create exceptional results based on my passion and experiences