Experienced Security Leadership.
Practical Results.
Cybersecurity consulting, assessments, and advisory services backed by real-world experience leading security programs since 2006.
I help organizations understand their risks, strengthen their security programs, and make informed decisions about where to focus their time, attention, and resources.
Cybersecurity Is More Than a Checklist.
Security frameworks and industry standards have their place. But knowing whether a control exists isn't the same as understanding whether it works, what risks remain, or what your organization should do next.
At Corvus Cybersecurity, I combine security and risk expertise, executive-level experience, and an understanding of how businesses operate.
Whether you need an independent assessment, help building a security program, or experienced leadership to guide your next steps, my focus is the same: practical solutions to meaningful security challenges.
The Right Expertise for the Challenge.
Every organization faces different security challenges. Corvus services are designed to meet you where you are, whether you're addressing a specific risk, improving an existing program, or navigating a major business decision.
Get a clearer picture of your security posture. I evaluate risks, identify gaps, and help prioritize improvements based on their potential impact on your business.
Explore Security Assessments →Experienced security leadership when you need it. From strategy and governance to board communication and investment decisions, I help organizations navigate complex security challenges without the commitment of a full-time executive.
Explore Advisory Services →Build a security program that works for your organization. Whether starting from scratch or improving an existing program, I help establish practical processes, controls, and priorities that support your business.
Explore Program Development →Meet security and regulatory expectations with greater confidence. I help organizations prepare for assessments, strengthen controls, organize evidence, and develop sustainable compliance practices.
Explore Compliance Services →Understand cybersecurity risks before a transaction closes. Practitioner-led assessments help buyers, investors, and leadership teams identify potential exposures, evaluate their significance, and make informed decisions.
Explore M&A Due Diligence →Protect sensitive content, production workflows, and business relationships. I help production organizations navigate security expectations while maintaining the flexibility their creative operations require.
Explore Production Security →Senior-Level Expertise.
From Start to Finish.
Corvus Cybersecurity is built on firsthand experience leading security programs since 2006.
When you work with Corvus, you work directly with experienced cybersecurity leadership. No unnecessary layers of consultants, generic reports built around a checklist, or recommendations that ignore the realities of your business.
My approach reflects the perspective of having been responsible for building, managing, and improving security programs, not simply evaluating them from the outside.
Understand the Business.
Evaluate the Risk.
Build a Path Forward.
Good security consulting starts with understanding your organization.
I take the time to learn how your business operates, what you're trying to accomplish, and where security creates risk or friction.
From there, I evaluate the available evidence, identify meaningful gaps, and develop recommendations that reflect your priorities, resources, and operating environment.
The result is more than a list of findings. It's a clearer understanding of your security posture, the decisions ahead, and a practical path forward.
Current Threat
Landscape
Security Is Always Changing.
Good Judgment Still Matters.
Cybersecurity isn't just about keeping up with the latest threats. It's about understanding what those developments mean for your organization and deciding what deserves your attention.
Through The Rook and The Corvus Brief, I explore cybersecurity, emerging technology, and the business decisions behind today's security challenges. My goal is to make complex topics understandable, challenge assumptions, and provide perspective grounded in real-world experience.
That cybersecurity budget request about to land on the CFO’s desk is full of acronyms and tool names, and the number probably went up again.
Read More →A company can follow its own security procedures and still inherit a breach from the vendor that handles its payroll data.
Read More →
Ransomware Without Downtime: The Shift to Data Exfiltration and Exposure David Shaw explains that ransomware leverage is shifting from encrypting systems…
Read More →
There are roughly 35,000 CISOs worldwide serving an estimated 359 million businesses. That 10,000-to-1 ratio is not a hiring problem.
Read More →
Most executives think the Known Exploited Vulnerabilities catalog is an IT problem.
Read More →
Your Cloud Counts: Regulators Now Expect It in Inventory and SLAs Key takeaway: If it runs your business, on-prem or cloud or hosted by a vendor, it now…
Read More →Let's Talk About
What Your Organization Needs.
Whether you're facing a specific security challenge, preparing for an assessment, or looking for experienced guidance on your overall security program, the first step is understanding what you're trying to accomplish.
Let's start with a conversation about your priorities, your challenges, and how Corvus might help.