Independent security advisory
Security leadership for companies that can't afford to guess.
Adept Security provides fractional CISO and advisory services to regulated companies in healthcare software and financial services, and to teams facing an acquisition or an audit.
Background
- Operating roles
- EVP and CISO at tier-1 financial institutions. Federal law enforcement. U.S. Army.
- Current seat
- CISO of a multi-entity healthcare software company operating in the US, Germany, the UK, Australia and New Zealand.
- Credentials
- CISSP. Named patent holder.
- Focus
- Healthcare software, financial services, and the places fraud and cyber risk overlap.
Engagement models
Fractional CISO
Ongoing security leadership without a full-time hire. That covers board reporting, ownership of the risk register, incident readiness, and the standing to say a launch isn't ready.
Advisory and assessment
A fixed-scope engagement around one question: M&A security diligence, ISO 27001 or SOC 2 readiness, a post-incident review, or a second opinion on an existing program.
Fraud and cyber risk
Control design, investigation support and program build-out for financial services clients, where fraud and cyber risk usually sit on the same desk.
How engagements run
- Scope
A short call to pin down the actual question.
- Assess
Direct review of the environment, the controls and the decision record. Findings carry dates and owners.
- Report
A written position on what is at risk and what to do first.
- Follow through
Support continues after the report lands, through remediation.
Recent work
Absence of data is never smooth air.
The turbulence agent ranks flights by expected turbulence and answers "unresolved" when the data can't support a reading. It began as a CMU Agentic AI capstone and runs live. The language model sits at the edges of the system, and deterministic code makes every decision that matters.