Representative experience

Advised defense contractors and critical infrastructure owners on utilizing cyber threat information sharing programs.

Advised multiple defense companies on U.S. government safeguarding and incident reporting requirements, including information system assessments against the NIST 800-171 standards for CUI.

Advised cloud service providers on complying with the FedRAMP program and agency specific cloud security requirements.

Advised on complying with FISMA information security contract requirements including preparing security authorization packages and undergoing numerous agency ATO processes.

Advised an advanced technology company with significant government contracts on the handling of a cybersecurity breach involving ITAR and EAR data.

Assisted multiple government contractors and critical infrastructure entities with comprehensive responses to significant cybersecurity incidents, including incident reporting to US-CERT and DoD.

Advised a major technology company on the handling of an “insider” attack potentially affecting the company’s HR databases.

Performed an intensive review of domestic data security safeguards and prepared a strategic plan for a data protection program for a leading global defense contractor.

Conducted a board-level investigation for a publicly held industrial company affected by a nation-state cyberattack on the sufficiency of management’s incident response and disclosure.

Conducted data protection compliance assessments and gap analyses for major international corporations and national nonprofit organizations.

Advised clients on federal information security requirements in GSA Schedule offerings and GSA Cloud BPAs.