Expert commentary on SOC 2, fractional CISO leadership, AI governance, and Microsoft security — from 25+ years in the trenches.
25+ years leading enterprise security, compliance, and identity programs — from building security programs from scratch to leading incident response, managing audits, and advising boards. Now applies that experience exclusively to SaaS companies as a founder-led consultancy: the person you talk to is the person who does the work.
Deepest on the Microsoft stack (Entra ID, Azure, Microsoft 365). Known for plain-spoken, practical takes — no jargon, no fear-mongering, no vendor pitches.
The 10 gaps that block every SaaS company — and the 110-day path from stalled deal to audit-ready.
Enterprise deals die in security review. How to answer 100-question questionnaires with evidence — fast.
Marketing pasting customer data into ChatGPT. Support using it for code. The governance conversation every board needs.
An honest framework — including when you should NOT hire a fractional CISO.
Entra ID, Conditional Access, Zero Trust — the controls that actually pass SOC 2 and ISO 27001 audits.
Practical AI risk management without enterprise bureaucracy. Copilot, LLMs, and board-ready policies.
For podcast appearances, panels, quotes, or contributed articles.
Schedule a Call s@onpointe.us