GRC · Cybersecurity · AI Governance
Most businesses don't get breached because hackers are clever. They get breached because nobody was paying attention to the basics. I fix that — with frameworks, policies, and programs built for how your business actually works.
Flat-fee engagements with clear deliverables. No retainers unless you want one. No jargon — just work that actually protects your business.
Find out exactly where your risks are before something forces you to find out the hard way. Ideal starting point for businesses with no existing security program.
Policies, procedures, and risk frameworks mapped to NIST CSF, ISO 27001, or SOC 2 — built for your team size and industry, not copy-pasted from a template.
Using AI tools across your business without a governance policy is a liability. I build the framework before regulators, insurers, or a breach make you build it.
Your security is only as strong as the weakest vendor with access to your data. I assess your third-party relationships and flag what needs attention.
Your team is your biggest attack surface. I build training your employees will actually pay attention to — including phishing scenarios built around how your business really runs.
Not ready to hire a full-time security lead? I act as your ongoing security advisor — attending meetings, reviewing decisions, and keeping your program moving month to month.
Free 30-minute consultation. No sales pitch — just a conversation about where you are and whether I can help.