Boe Q.

I am a vCISO experienced at guiding organizations to cybersecurity compliance. I have experience with several frameworks including ISO 27001, NIST CSF, and HITRUST, but my primary desire is to consult on CMMC given the overall need in this space. If you are an organization that is seeking to achieve CMMC Level 1, 2, or 3 certification, but you are struggling to navigate the complex web of CMMC information, I can help! Having formerly served as the highest-ranking IT official for a DoD contractor, I bring both a seasoned perspective and a practical experience to guiding organizations through the complexities of compliance. I spent the past five years leading initiatives such as System Security Plans (SSPs), remediating POA&Ms, developing risk assessments, and developing comprehensive IT policy frameworks. I was directly accountable for corporate-level CMMC and NIST 800-171 self-assessments and maintained SPRS scoring and documentation. As a CMMC Registered Practitioner (RP), I pare hands-on implementation expertise with qualified credentials in the CMMC space.