HomeIndustries
Built for organizations someone else regulates.
Generalist IT firms serve everyone, which means they've defended nobody's work in front of an examiner. I focus on three verticals where I know the frameworks, the assessors, and the failure modes.
Financial Institutions
Credit unions and community financial institutions remediating examination findings — information security program gaps, network segmentation, access control, logging and monitoring. Evidence-ready for the follow-up exam.
Defense Contractors
Suppliers and manufacturers in the defense industrial base implementing NIST 800-171 for CMMC Level 2. Enclave architecture, control implementation, SSP and POA&M development, and single-tenant hosting for CUI.
Municipal & Utility Environments
Water and wastewater utilities and municipal operations securing control systems. IT/OT segmentation, secure remote access for operators and vendors, and monitoring built on Fortinet's OT security platform.
Adjacent to one of these?
I also work with healthcare practices and manufacturers with compliance-driven infrastructure needs. If your problem is a framework and a deadline, it's probably a fit.