Contact / New engagement

Request services

I help organizations understand what they are exposed to and what to do about it. 10+ years across enterprise IT and cybersecurity — assessing controls against NIST CSF, NIST 800-53, and ISO 27001, writing the policy that makes them enforceable, and producing briefings leadership can act on.

Tell me a little about your organization and what you're working on. I read every request personally and reply within a few business days. Based in New York, working globally. Contact for pricing.

Prefer to read first? Browse the journal or the selected work.