About

I help my clients identify risk across the organization in their systems, applications, security programs, policies, and more. I give them actionable recommendations that enable them to reduce risk measurably. They can effectively communicate this in both operational and financial terms, which helps them quickly gain stakeholder support. In short, I make your job easier saving you time and money.

I'm a Cyber Risk Expert, Adjunct Professor, Author, Speaker, and Mentor with over 35 years of experience in network design and security. I have supported multiple US Agencies, including the Nuclear Regulatory Commission, performing compliance assessments, agency-wide risk analyses, and risk quantification.  

As an Adjunct Professor I teach Cybersecurity Risk Quantification at Boise State University’s Cyber Resilience and Operations Program (CORe).  I authored the textbook "Cybersecurity Risk Quantification" and developed the coursework. The BSU CORe program was recently named one of the top 10 cyber programs in the US by FORBES Magazine.

I regularly speak at ISACA and ISC2 chapters across the United States, and at various related industry conferences.