We Tell It Straight, With No Surprises

All consultants are highly experienced, recognized by the industry and known for plain-dealing and attention to details. Our team of highly seasoned veterans has decades of standards-based information security and practical operations experience.

Brock Griffin
CDPSE, CISSP, CISA

CEO and Owner

Brock Griffin is an innovative, forward-thinking leader with over 20 years of technical engineering, IT architecture, cybersecurity operations and leadership experience.

More about Brock →

John B. Weaver
CISSP, CISA, CISM, CPP, CSA — Certified STAR Lead Auditor

Principal Consultant

John is an IRCA-certified ISO 27001 Information Security Auditor and British Standards Institute-qualified in Implementation with more than thirty years’ experience in Internet and Information Security. He has participated in the evolution of the Information Security industry in leadership roles within technology companies and as an expert guiding the activities of others using his considerable knowledge and experience.

More about John →

Cynthia Kriha
MIM

Chief Operating Officer and ISO Program Manager

Cynthia Kriha has a diverse career in technology leadership focusing on operational excellence, information security, business systems efficiency and continuous improvement. She is a trusted partner of customers, ensuring development and delivery of actionable plans that meet business objectives and industry standards.

More about Cynthia →

Robert A. Aanerud
Accredited Certifying Body Lead Auditor for ISO Registrars in multiple ISO Standards and Industry Specialty Codes

Principal Cybersecurity and Privacy Consultant, Auditor and Technical Advisor

Robert A. Aanerud is an internationally recognized expert in the design, delivery, implementation, and audit of cybersecurity, privacy, and data protection conformance and compliance programs, auditing, and consulting services. Robert has more than 50 years of experience and is sought out for his depth of knowledge and experience in all areas of information security, privacy, ethics, compliance, audit, and corporate governance.

More about Robert →

George Bakalov
CvCISO, CC

Senior Consultant

George Bakalov is uniquely adept at aligning security initiatives with organizational goals stemming from his many years of working with distributed, cross-functional teams and a focus on cybersecurity, risk management and regulatory compliance.

More about George →

Kathy Braun
MBA, CCE

Principal Consultant, Cybersecurity and Risk Management

Kathy Braun is an experienced cyber risk management consultant, computer forensic investigator, and incident response senior advisor with more than twenty-five years of practical experience. She provides proactive cyber risk management maturity strategies via threat modeling, using cyber-attack scenarios aligned with business requirements. Her guidance transforms risk management and compliance programs, providing strategic oversight and practical management working with businesses to mature the organization’s data privacy posture. 

More about Kathy →

Mark Eckel
CBCLA, CBCP, ISP, PMP, MBA, MAOM

Principal Consultant

Mark Eckel’s business continuity and disaster recovery planning, fire/life safety and emergency management passion was forged in the aftermath of the 9/11 attacks.  For more than 25 years, Mark has applied his extensive knowledge and experience working with a wide range of customers to optimize and test their plans to protect people, property and operations from risk and disruption, using an “all hazards” approach.  For more than ten years, Mark has also worked extensively with standards such as ISO 27001, the National Industrial Security Program Operations Manual (NISPOM) and the Federal Risk Management Framework (RMF). 

More about Mark →

Ainsley A. McKay
MAT, Certified ISO 27001 Lead Auditor

Principal Consultant and Knowledge Management Specialist

Ainsley A. McKay is an ISO 27001 lead auditor and knowledge and document management expert with significant experience in the design, delivery, implementation, and audit of ISO 27001 security and compliance programs. She has conducted more than 1400 hours of ISO internal audits and continues to provide expert guidance on information security.

More about Ainsley →

Chelsey Pozarnsky
CIA, Certified ISO 27001 Lead Auditor

Senior Consultant

Chelsey Pozarnsky has extensive internal auditing experience within corporate finance, operations, information security and field audits. She has worked in many industry segments including retail, manufacturing, restaurants and insurance.

More about Chelsey →

Milinda Rambel Stone
CISM, CISA, CRISC, MS, MBA — Certified ISO27001 Lead Auditor

Principal Consultant

Milinda Rambel Stone is an executive security leader with proven experience building and leading security programs and teams. Milinda has more than 20 years experience creating and managing large-scale information security programs in technology, healthcare, and financial services. Milinda has knowledge and experience in areas of information security, cloud security, compliance, audit, and corporate governance.

More about Milinda →

Patrick F. Sullivan
PhD

Principal Consultant

Patrick F. Sullivan is a recognized subject matter expert in planning, implementing, evaluating, and helping customers improve information security and privacy governance, risk management, and compliance systems. He has extensive experience as a lead auditor for ISO 27001 and ISO 20000 as well as extensions for ISO 27701, and GDPR.

More about Patrick →