I apply 30+ years of IT experience to help SMBs close the gap between believing they're protected and being able to prove it.

I combine expertise in business analysis, information security, and digital transformation to help businesses understand their risk and resilience, identify opportunity, and put the process, governance, documentation, and evidence in place to improve their security program and their business.

For Managed Service Providers, I help turn client needs beyond traditional technical services into opportunities they can pursue and deliver. I add expertise or capacity where needed, helping MSPs capture more value from existing relationships and make their clients better clients.

For business owners, I help answer the questions that security products alone cannot: Are we protecting the right things well enough? Do our practices work? Who is responsible? Can we prove what we do? Can we recover when something goes wrong?

For cyber insurance brokers, I work upstream of renewal to help clients address the practices behind questionnaire answers and policy requirements. The objective is a better-prepared client, less friction at renewal, and answers supported by what the business actually does.

DM if I can help you with:
• Information security program improvement
• Practical governance and compliance
• Cyber insurance readiness and defensibility
• MSPAlliance Cyber Verify readiness and support
• AI opportunity analysis, governance, and implementation support
• Business process analysis and improvement
• Policies, standards, procedures, and other program deliverables
• Requirements, responsibilities, and evidence definition
• Incident and recovery readiness
• Assessments, gap analysis, and improvement planning

I do not sell security products. I work alongside owners, MSPs, brokers, and other specialists, and recommend additional expertise or services when they are needed.