John is an experienced IT security professional skilled in helping organizations improve the security of IT operations. John has worked in IT for over ten years, with the last eight years focused on the areas of IT security and compliance to common security frameworks (e.g. NIST, ISO, HIPAA, PCI, FFIEC, etc.) In addition, John's background of working with highly classified information in the Armed Services has taught him the importance of adherence to strict security controls and practices.John is also adept at helping business units and management understand how IT security risks translate to business risks. Too often IT security professionals are skilled at exploiting technical vulnerabilities, but unable to help management tie those vulnerabilities to a failed process or missing governance. Rather than identifying unrelated security violations at a tactical level, John is successful at assessing an overall security program and identifying opportunities for improvement at a strategic level. Certifications:Certified Information Systems Security Professional (CISSP)Certified Ethical Hacker (C|EH)PCI Qualified Security Assessor (QSA)Certified Penetration Tester (CPT)Computer Hacking Forensic Investigator (C|HFI)Certified Computer Forensics Examiner (CCFE)Security+Network+Specialties: Network Security, Information Security, Risk Management, Regulatory Controls, Incident Response, Vulnerability Management, Penetration Testing, Security Incident and Event Management (SIEM)