Brett D.

I help healthcare organizations and growing businesses identify cybersecurity risks, strengthen compliance, and build practical security programs aligned with their operations and business goals. As a cybersecurity leader, military veteran, and CISM- and CDPSE-certified professional, I bring extensive experience in information security, technology strategy, governance, risk management, and compliance. My healthcare background helps me connect security requirements with clinical workflows, patient data protection, and operational needs. Whether you need a security risk assessment, updated policies, a prioritized remediation roadmap, or ongoing virtual CISO support, I translate complex requirements into clear actions your leadership and technical teams can execute. How I Can Help • Virtual CISO and Security Leadership: Develop security strategies, establish governance, and provide executive guidance aligned with organizational priorities. • Security Risk Assessments: Identify control gaps, evaluate business impact, and deliver prioritized remediation recommendations. • GRC and Compliance Programs: Assess and strengthen alignment with NIST frameworks & HIPAA/HITECH requirements • Security Policies and Procedures: Create practical documentation with clear responsibilities, actionable requirements, and defined review processes. • Healthcare Cybersecurity: Address risks affecting patient information, clinical operations, workforce practices, and third-party relationships. • Vendor Risk Management: Evaluate service providers, identify security concerns, and support informed vendor selection and oversight. • Audit Readiness and Reporting: Organize evidence, assess controls, and prepare clear documentation for audits and customer security reviews. • Incident Response and Business Continuity: Develop plans that establish responsibilities, support coordinated response, and prioritize recovery. • Security Awareness: Build training and communication programs that help employees understand their responsibilities. What You Can Expect Clear communication, practical recommendations, and deliverables tailored to your organization’s size, resources, and risk exposure. I work with executives, IT teams, and operational stakeholders to build consensus, assign ownership, and turn findings into measurable progress. My broader background in IT strategy, business process improvement, project delivery, contracting, and vendor selection helps ensure security recommendations are operationally realistic and financially sound. Let’s discuss your security priorities, compliance needs, and the deliverables that would provide the most value to your organization.