Last updated October 21, 2026
Information only. Articles, presentations, open-source projects and other content on this site are general information, not advice for your situation. Reading them does not create a client relationship; that exists only under a signed written agreement.
Advisory services. I provide security, privacy and AI governance advisory services as an independent contractor. I am not a law firm, CPA firm or licensed insurance agent or broker, and I don’t provide legal, accounting, tax or insurance advice, audits, attestations or certifications. I don’t act as a PCI QSA, SOC 2 or HITRUST assessor, penetration tester or managed security provider.
Fractional CISO engagements. I serve as an independent advisor, not as an officer, director or employee of any client.
No guarantees. I don’t guarantee audit or certification outcomes, regulatory results, prevention of security incidents, or the performance of any candidate or hire. Budget, cost, timeline and effort figures are planning estimates, not guarantees.
Your decisions. Clients keep full authority over and responsibility for their decisions, including implementation, operation of controls, regulatory compliance and hiring. My recommendations are professional opinions to inform those decisions.
Access. My engagements don’t require access to protected health information or production systems, and I don’t operate client systems.
Hiring advisory. Candidate assessments are professional opinions based on job-related criteria the client approves. Hiring decisions rest solely with the client. I am not an employment agency, I don’t prepare background checks or consumer reports, and I don’t take placement fees.
Training. Training and workshops are educational and don’t confer certification. References to tools or vendors are not endorsements, and AI output needs human review before use.
Affiliations. I hold an equity advisory role with ArmorIQ and disclose it wherever it is relevant to an engagement. Nothing on this site is investment advice.
References and trademarks. Client examples are anonymized. Trademarks and certification names belong to their owners.
Agreements govern. Each engagement is governed by its written agreement, which controls over anything on this site.
Personal views. Views expressed here are my own, not those of any current or former employer or institution.
