While I am open to entertaining new opportunities working as a CISO/Director/Manager of Cyber and Information Security within the right organization, when on medical leave for my service-connected disability I started Commonsense Consulting and Management LLC. I did this because, in my professional experiences, I've seen too many instances where organizations run to implement the cheapest, or the fastest, or the most current, or sometimes even the useless - in an attempt to reach compliance and mitigate their risks. Never fully realizing that being compliant with a regulation, law, or standard doesn't secure an environment. This is not to say that becoming compliant with a given regulation or law isn't a great methodology to deploy, but you can't stop there...I've developed and adopted the following two primary principles:1. Security is a Shared Responsibility: I don’t and won’t perform a task or attempt to convince my senior management or client to deploy the latest, greatest, or most expensive solution. As I understand that every environment and situation is different - I avoid deploying cookie-cutter solutions, as what works in one environment - may not work in another.2. I will only assess it, review it, recommend it, implement it and/or manage it – if it makes common sense. I strive to eliminate the complications that exist within cyber and information security, as I want to always ensure that my clients and organization understand the why. Hence, I work to deploy risk-based cost-effective commonsense solutions to everything that I do.