Your human in the loop—helping organizations reduce cyber risk and increase cyber resilience by empowering people to make better security decisions.
Custom awareness programs that go beyond compliance checkboxes. Behaviorally-grounded content, tabletop-inspired scenarios, and briefings that make security feel like stewardship — not surveillance.
Design and facilitation of incident response tabletops using the PICERL framework. Actionable post-exercise reports that surface control deficiencies and audit-ready remediation paths.
Talks on human-centric security, GRC as culture, AI ethics for non-technical leaders, and building continuous awareness programs. Simply Cyber Con speaker (2023, 2024, 2025).
Three-time Simply Cyber Con speaker, ministerial teacher, GRC evangelist. I translate complex risk into decisions your people can act on.
View all talksReforming cybersecurity awareness training. De-emphasizing compliance-based training that promotes strong awareness through empowered decision making.
Leveraging the Weekly News Brief to build a strong security awareness culture. Operationalizing threat intelligence into repeatable risk communication.
Educating ministerial staff on AI capabilities, emerging risks, and ethical decision-making frameworks. Introducing governance concepts to non-technical leaders.
It's been a minute since I had a website up, but I'm back — with a few thoughts on AI governance that didn't make the podcast cut.
Read