Services
From policy to proof
Whether you're facing a deadline, a contract requirement, or simply want to know where you stand, there's a place to start. What you'll find below is a sampling, not the full list. If you have a need you don't see here, just ask.
Proof & Posture Assurance
Audit-ready. Evidence-backed.
Assessments, gap analyses, compliance support, policies, and documentation that show where you stand and get you where you need to be.
A sampling of what I offer
- Information security program development
- Security risk assessments
- Gap analysis against CMMC, NIST, GLBA, and your chosen framework
- CMMC Level 1 and Level 2 readiness
- Policies, procedures, and plans
- System Security Plans (SSP) and POA&Ms
- Environment documentation: layered network diagrams, data flows, and flowcharts
- Privacy program development and data mapping
- Evidence collection and organization
- Business and process analysis
- Remediation roadmaps
CMMC services focus on readiness and preparation. Formal CMMC certification assessments are performed by authorized C3PAOs.
Proof & Posture Advisory
Guidance from someone who's held the CISO seat
Executive-level security and GRC leadership for organizations that need the judgment without a full-time hire.
A sampling of what I offer
- Fractional or virtual CISO (vCISO)
- Security program strategy and roadmap
- Board and leadership reporting
- Vendor and third-party risk reviews
- Incident response plans and playbooks
- Privacy and AI regulation guidance, U.S. and international
- Microsoft 365 security and governance guidance
Proof & Posture Training
Learn it. Apply it. Prove it.
Security, compliance, and technology training built by a certified instructor with more than 30 years in the classroom.
A sampling of what I offer
- Security awareness training for staff
- Compliance training (CMMC, GLBA, NIST)
- Leadership and board briefings
- Incident response training, tabletop exercises, and drills
- Custom workshops for IT teams
- Training on your own processes and systems
- Recorded training videos your team can replay anytime
- Pre-recorded IT and security courses, built from real needs I found leading IT teams (coming soon)
- AI literacy and safe AI use
- Keynotes, panels, and conference sessions
Proof & Posture Resources
Templates that turn policy into proof
Ready-to-use tools, plus custom documentation and training materials built around how your organization actually works.
A sampling of what I offer
- Custom instructional documentation built around your processes and systems
- Custom training materials for your team
- Policy and procedure templates
- Readiness checklists
- Infographics and quick-reference guides
- Scripts and automation helpers
- Knowledge-base articles
Proof & Posture AI Labs
Smart automation, secure by design
AI workflows, agents, and voice agents built with governance and security from day one, not added afterward.
A sampling of what I offer
- AI workflow automation
- Custom AI agents and voice agents
- AI acceptable use policies
- AI risk and governance reviews
- AI tool vetting forms and templates, proven in a real environment before any tool was allowed in
- AI exception request forms and approval workflows
Don't see what you need? Just ask.
Forty years in IT and security covers a lot of ground, more than one page can hold. Whether you know exactly what you need or aren't sure where to start, the free consult is the place to talk it through.