Elastos C.

Elastos Chimwanda is a Virtual CISO (vCISO), ISO Management Systems Auditor, and AI Security & Governance Advisor helping organizations strengthen cybersecurity, manage cyber risk, securely adopt AI, and build effective governance programs. His expertise spans cybersecurity, AI security, GRC, management systems auditing, and cloud security, with experience across leading international security and compliance frameworks. Core Specializations: • ISO Management Systems Auditing: ISO/IEC 27001, ISO/IEC 42001, ISO 9001, ISO 13485 • Cybersecurity & GRC: NIST 800-53, NIST CSF, PCI-DSS, SOC 2, HIPAA, CMMC • vCISO/Fractional CISO Advisory: Security strategy, security roadmaps & board-level risk reporting • Risk Management: ISO 31000, cyber risk assessments, compliance, and governance transformation. • Cloud Security: AWS, Azure, GCP, hybrid and cloud-native security architecture and governance. • AI Security & Governance: NIST AI RMF, EU AI Act, AI risk and secure AI adoption & solution design. Credentials: CISSP | CCSP | CISA | CCSK | ITIL | ISO/IEC 27001 Lead Auditor | ISO 9001 Lead Auditor | ISO 31000 Lead Risk Manager | Microsoft Certified: Azure AI | OpenAI Cyber Solutions Practitioner As an Author and Lead Content Developer for ISACA Global, he has authored numerous authoritative manuals and audit programs utilized globally by technology risk and cybersecurity professionals, including the Official CISA Review Manual (28th Edition), the Cybersecurity Audit Study Guide (2nd Edition), and the Biometrics Audit Program (2nd Edition). He is also a member of the NIST AI Cybersecurity COI and an ITIL Ambassador, reflecting his commitment to advancing AI security and modern IT service management.