Thomas W.

Need an effective, defensible, responsibly-priced cybersecurity program? My consultancy has helped a wide variety of organizations - from smaller SaaS startups to larger Fortune 1000 brands you know and trust - realize comprehensive, integrated, end-to-end cybersecurity aligned with: • Institutional goals and internal risk appetite. • Client supply chain questionnaires / contract requirements. • Industry and regulatory requirements (e.g. GLBA, PCI-DSS, HIPAA, NYS DFS 23 NYCRR 500, DFARS / CMMC) • NIST Cybersecurity Framework (CSF) and / or good industry practices (e.g. SOC Readiness, NIST Special Publications 800-30, 800-37, 800-53, 800-171) My consulting practice is reputable, insured, and responsibly priced, and you can expect quality results, because I’m an award-winning, former IT / cybersecurity leader with: • Two decades of experience. • M.Sc. in Information Security & Assurance • M.B.A. in Information Technology Management • A wide variety of advanced industry certifications, including the CISSP and CISA. Beyond cybersecurity program compliance, I can represent your organization as a Chief Information Security Officer on a cost-effective, fractional basis supporting any further cybersecurity needs, including: • Risk assessments. • Audit response / defense. • Vulnerability scanning & penetration testing. • Policy development (e.g. Incident Response, Vulnerability Management, Secure Development) • Disaster recovery & business continuity planning. • Third-party risk / supply chain reviews. • Cybersecurity marketing (e.g. architecture diagrams and white paper development that illustrate, showcase good practices) • Capability / tool implementation & support (e.g. Data Loss Prevention, Multi-Factor Authentication) Wherever your organization stands in its cybersecurity journey, I’m almost always able to come up with a responsible, defensible solution within the budget available - often at a fixed cost - so please book a consultation with me to discuss your unique circumstances!