We Tell It Straight, With No Surprises

Brock Griffin
CDPSE, CISSP, CISA

CEO and Owner

Brock Griffin is an innovative, forward-thinking leader with over 20 years of technical engineering, IT architecture, cybersecurity operations and leadership experience.

John B. Weaver
CISSP, CISA, CISM, CPP, CSA — Certified STAR Lead Auditor

Principal Consultant

John is an IRCA-certified ISO 27001 Information Security Auditor and British Standards Institute-qualified in Implementation with more than thirty years’ experience in Internet and Information Security. He has participated in the evolution of the Information Security industry in leadership roles within technology companies and as an expert guiding the activities of others using his considerable knowledge and experience.

Cynthia Kriha
MIM

Chief Operating Officer and ISO Program Manager

Cynthia Kriha has a diverse career in technology leadership focusing on operational excellence, information security, business systems efficiency and continuous improvement. She is a trusted partner of customers, ensuring development and delivery of actionable plans that meet business objectives and industry standards.

Retired
Robert A. Aanerud
Accredited Certifying Body Lead Auditor for ISO Registrars in multiple ISO Standards and Industry Specialty Codes

Principal Cybersecurity and Privacy Consultant, Auditor and Technical Advisor

For over two decades, Robert has been a critical part of the JBW Group family and instrumental in the founding of the company and its success over the years.

As an internationally recognized expert in the design, delivery, implementation, and audit of cybersecurity, privacy, and data protection conformance and compliance programs, auditing, and consulting services with over 50 years of experience, we will miss his guidance on all things information security and privacy related as well as his friendship and mentoring. We wish him a wonderful retirement!

George Bakalov
CvCISO, CC

Senior Consultant

George Bakalov is uniquely adept at aligning security initiatives with organizational goals stemming from his many years of working with distributed, cross-functional teams and a focus on cybersecurity, risk management and regulatory compliance.

Kathy Braun
MBA, CCE

Principal Consultant, Cybersecurity and Risk Management

Kathy Braun is an experienced cyber risk management consultant, computer forensic investigator, and incident response senior advisor with more than twenty-five years of practical experience. She provides proactive cyber risk management maturity strategies via threat modeling, using cyber-attack scenarios aligned with business requirements. Her guidance transforms risk management and compliance programs, providing strategic oversight and practical management working with businesses to mature the organization’s data privacy posture. 

Mark Eckel
CBCLA, CBCP, ISP, PMP, MBA, MAOM

Principal Consultant

Mark Eckel’s business continuity and disaster recovery planning, fire/life safety and emergency management passion was forged in the aftermath of the 9/11 attacks.  For more than 25 years, Mark has applied his extensive knowledge and experience working with a wide range of customers to optimize and test their plans to protect people, property and operations from risk and disruption, using an “all hazards” approach.  For more than ten years, Mark has also worked extensively with standards such as ISO 27001, the National Industrial Security Program Operations Manual (NISPOM) and the Federal Risk Management Framework (RMF). 

Ainsley A. McKay
MAT, Certified ISO 27001 Lead Auditor

Principal Consultant and Knowledge Management Specialist

Ainsley A. McKay is an ISO 27001 lead auditor and knowledge and document management expert with significant experience in the design, delivery, implementation, and audit of ISO 27001 security and compliance programs. She has conducted more than 1400 hours of ISO internal audits and continues to provide expert guidance on information security.

Chelsey Pozarnsky
CIA, Certified ISO 27001 Lead Auditor

Senior Consultant

Chelsey Pozarnsky has extensive internal auditing experience within corporate finance, operations, information security and field audits. She has worked in many industry segments including retail, manufacturing, restaurants and insurance.

Milinda Rambel Stone
CISM, CISA, CRISC, MS, MBA — Certified ISO27001 Lead Auditor

Principal Consultant

Milinda Rambel Stone is an executive security leader with proven experience building and leading security programs and teams. Milinda has more than 20 years experience creating and managing large-scale information security programs in technology, healthcare, and financial services. Milinda has knowledge and experience in areas of information security, cloud security, compliance, audit, and corporate governance.

In Memoriam
Patrick F. Sullivan
PhD

Principal Consultant

We honor and remember our dear colleague, 𝗗𝗿. 𝗣𝗮𝘁𝗿𝗶𝗰𝗸 𝗦𝘂𝗹𝗹𝗶𝘃𝗮𝗻, whose passing on February 12, 2025, was sudden and heartbreaking, leaving a void in the JBW Group family that words cannot fully express. For over two decades, Patrick was more than an expert in information security and privacy—he was a mentor, a collaborator, and a friend to all who had the privilege of working alongside him. His wisdom, kindness, and unwavering dedication shaped countless careers and lives.

Patrick’s impact will never be forgotten, and he will be profoundly missed.