20+ year experienced cybersecurity advisor and consultant specializing in strategic implementation and enterprise-wide cyber resilience, business continuity and long-term risk reduction to critical IT infrastructureCareer Highlights: DHS/CISA Cyber Security Advisor for New England (2017-2022)DHS/CISA Program Manager on the White House's Comprehensive National Cybersecurity Initiative on Supply Chain Risk ManagementRapid7 ISO 27001:2013 Certification (2023)Rapid7 SOC 2 Type II Compliance (2022 & 2023)Presidential Policy Directive 41 on U.S. Cyber Incident Coordination (2016)U.S. National Cyber Incident Response Plan (2017)DHS Cyber Strategy (2015)DHS/CISA Cross-Divisional Implementation Plan (2016)In-tune with: U.S. National Cybersecurity Strategy (2023 & 2018)NIST Cybersecurity Framework 2.0NIST SP 800-53 v5 and 53BNIST SP 800-37 Rev 2 - Risk Management Framework for Information Systems and OrganizationsExecutive Order 13800 on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure Executive Order 13636 on Improving Critical Infrastructure CybersecurityThe President's Executive Order (EO) 14028 on Improving the Nation's CybersecurityExperienced in public and private sector engagements, keynote speeches, risk evaluation to IT security systems, overhauling information security programs from policy management, compliance, risk evaluation, customer contract reviews, third party vendor assessments. intelligence, information sharing, auditing, incident response planning, strategy, and mentorship. Trained in:Carnegie Mellon/SEI CERT Resilience Management ModelCapability Maturity Model IntegrationCybersecurity Awareness TrainingDHS/CISA Cyber Resilience Review AssessmentDHS/CISA External Dependencies Management AssessmentDHS/CISA Cyber Infrastructure SurveyDHS/CISA Cybersecurity Evaluation ToolSpecialties:Information Security Policy Management, Governance, Compliance, Cyber Maturity Assessments, IT Auditing, Partnership Engagement, SLTT Collaboration, Critical Infrastructure Resilience, Supply Chain SecurityTools: Armis, Asana, Sharepoint, Auditboard, Cyberscope, Ombud, Miro, Microsoft 365, Okta, Origami Risk, Phalanx ERM