Topics & how I help

Speaking & Advisory

I speak, run workshops, and advise on the topics below — drawn from 25+ years building and auditing security programs across banking, public sector, healthcare, and global manufacturing. Each can be delivered as a keynote, a hands-on workshop, or an advisory engagement — many built around The AI-Native Security Framework.

Invite me to speak

AI & Copilot Security

Adopt Microsoft 365 Copilot and generative AI without leaking your crown jewels.

  • Secure Copilot launch with Purview DSPM, insider-risk & oversharing controls
  • Responsible AI and agentic-AI governance (Power Platform, Onyx)
  • Red-team testing for AI data leakage; GenAI SaaS governance
KeynoteWorkshopAdvisory

Cloud & Microsoft Security

Mature your Azure and Microsoft 365 security posture to a measurable standard.

  • Defender for Cloud (CSPM/CWP), Azure Policy aligned to NIST & ISO 27001
  • Microsoft Sentinel SIEM/SOAR, logging & detection strategy
  • Secure cloud and SAP migration security architecture
WorkshopAdvisory

ISO 27001 & SOC 2 Certification

Get certified — and stay audit-ready — with a program built to pass.

  • ISO 27001 implementation, Stage 1 & 2 certification audits, audit simulations
  • SOC 1 / SOC 2 readiness; ISO 27017 / 27018 / 27005 / 27006
  • 140+ ISMS policies & procedures authored across engagements
WorkshopAdvisory

Virtual / Fractional CISO

Senior security leadership on demand — strategy, roadmap, and board-ready reporting.

  • Security program design, risk management & KRIs/KPIs
  • Executive & board advisory, vendor / MSSP evaluation
  • Delivered as vCISO for healthcare, financial services & MSP clients
AdvisoryFractional

Security Audits & Assessments

Know exactly where you stand against the frameworks that matter.

  • NIST CSF 2.0, CIS Controls v8, COBIT assessments & scoring
  • Internal audit, project assurance, third-party risk reviews
  • Big-4-grade rigor from 25+ years in IT & security audit
WorkshopAdvisory

Awareness, Training & Speaking

Lift your team’s security capability — from the plant floor to the boardroom.

  • Keynotes & panels on AI security, cloud security and GRC
  • Security certification prep (CISSP, SC-200) and internal-audit & data-analytics training
  • OT / staff awareness programs delivered across US, Canada, UK & Australia
KeynoteWorkshopTraining

Industries served

  • Banking & financial services
  • Public sector
  • Healthcare
  • Pension administration
  • Logistics
  • Technology & SaaS
  • SMB

Have an event, audience, or challenge in mind?

Start a conversation