David K.'s Linkedin Analytics

I am a Certified Information Systems Security Professional (CISSP, since 2011) in good standing with over 32 years of Information Technology experience. My focus over the past 13+ years has been in the implementation of Information Security Programs in the highly regulated healthcare industry. The Information Security Program is based on the HITRUST CSF and focuses primarily on Risk Management, from identification, prioritization, development of the "Corrective Action Plan" (actions necessary to remediate, reduce, transfer or accept org-wide risks) and finally the operationalizing of the security controls. I am very excited to bring my experiences with risk based information security management to companies that are investing in a cloud infrastructure. I have extensive hands on experience in implementing security controls in the Microsoft 365 and Azure environment utilizing Microsoft Defender suite of security tools with Sentinel to achieve Zero Trust principals. History: I started my career working on trading floors for several Investment Banks in the San Francisco area during the Dot Com Boom. My experience in these demanding and fast paced environments translated well to startup companies. These startups had a small workforce with enterprise scale infrastructure and provided services to government organizations and large corporations. Since attaining my CISSP certification, I have refocused my attention on Information Security, using my technical experience to help smaller companies comply with the security requirements of their larger customer base and federal & state healthcare regulatory agencies.