Consulting Services

---

Identify gaps, measure risk, and get a clear action plan for improvement.
Deliverables include:

• Full NIST CSF 2.0 assessment 
• Risk register 
• Maturity scoring 
• Executive summary 
• 12-month roadmap

Compliance requires structure. I create:

• Security policies 
• Standards and procedures 
• Access control policies 
• Incident response plans 
• Acceptable use policies 
• Data retention and classification policies 

Built to align with NIST, HIPAA, CMMC, ISO 27001, and business requirements.

Be ready for ransomware, data breaches, and insider threats.
Services include:

• IR plans 
• Playbooks 
• Communication templates 
• Tabletop exercises 
• Team role definitions

Get ongoing guidance without hiring a full-time CISO.
Perfect for organizations needing:

• Regular security reviews 
• Governance oversight 
• Risk assessments 
• Vendor reviews 
• Security planning and coaching

Benefit from deep expertise in:

• Threat identification 
• Suspicious activity investigations 
• Crypto tracing (OSINT) 
• Early warning intelligence 
• Executive threat briefings

Practical, high-impact training for:

• Employees 
• Executives 
• IT teams 
• Incident response leaders 

Customized to your environment.