Services

This is the full list of what I work on, grouped by kind rather than alphabetically: the compliance frameworks and certifications, the operational capabilities that keep a security program running day to day, incident response and resilience work, adversary testing, and the governance and advisory side. If you don't see your exact situation here, it's probably still something I can help with — get in touch and we'll figure out where it fits.