ISACA

ISACA Denver Chapter Board position; facilitation of all certification-related activities, including scheduling of and budget management for classes sponsored by the Chapter.

Certification Coordinator

Study preparation/mentoring classes provided for members of the ISACA Denver Chapter.  Delivered virtually, conducted live, and recorded for the benefit of attendees to aid in their exam success process.

Accredited by APMG.

Lead Trainer (CISM, CRISC, CISA)

Nuspire

Providing thought leadership and advisory services to clients in the mid-market space on the areas of cybersecurity, governance, risk, and compliance with data security and privacy standards.

Specializing in bringing responsible, prudent, 'huge company' program maturity to small and medium-sized businesses.

VP, Cybersecurity Consulting

A trusted advisor to organizations in the SMB/Midmarket space seeking guidance and thought leadership in the areas of cybersecurity, compliance, and risk management.

Security, Compliance, and Risk Management Consultant

Stealth - ISS Group Inc.

Providing trusted advisor leadership to team of Operations, Engineering, SOC, and IR professionals as well as clients via virtual Chief Information Security Officer (CISO) service.

VP of Consulting

Synoptek

Developed a Security Consulting Practice within a Managed Services and Consulting organization providing class-leading Information Security, Compliance, Governance, and Risk Management services to clients.  Mentored team members from within the Practice as well as other parts of the organization, successfully building a high-performing team of varied skill sets, experiences, and backgrounds.

Director, Security Consulting

FourPoint Energy, LLC

Management and oversight for all operations related to technology infrastructure, hardware, software, systems (server, network, and client) and user support interaction.  Advised executive group on project initiatives from feasibility through to completion, including guidance relevant to data security and integrity.  Coordinated and managed the efforts of many software vendors, contractors, and long-term IT consulting firm (Business Network Consulting).
Selected Contributions:
* Successfully designed and implemented new multi-faceted network infrastructure for highly-visible and forward-thinking new facility in the heart of Cherry Creek, including integration with $3M audio/visual and teleconferencing environment.
* Devised, implemented, and executed protocol for rapid deployment of devices and infrastructure to field workers in a rural setting.
* Fostered a reputation for providing agile service and exceeding organization requirements with minimal notice.
* Through education and training initiatives, increased organizational security and business continuity/disaster recovery posture significantly.* Decreased infrastructure-related procurement costs by approximately 20%.

IT Systems and Security Director

BNC - Business Network Consulting

Served as primary Information Services representative and engineer to many small and medium business clients in industries ranging from oil & gas to wealth management.  Services provided include information security/risk management guidance, user training, infrastructure planning/implementation/administration, budgeting and forecasting, project management, and many other services scoped as required.  For Business Network Consulting, served as resident security/compliance expert and mentor to new engineers entering the team.
Selected Contributions:
* Architecture and facilitation of migration to hosted Exchange/Office 365 environments for multiple small and medium clients.
* Orchestrated a number of from-the-ground-up infrastructure builds including the creation and population of Windows AD domains, establishment of network services, and required core servers.
* Selected by BNC management team to train and educate new engineers using experience and education earned in the field over 15+ year career.  Mentees consistently perform well within the team and return greater than average customer satisfaction.* Worked closely with clients to devise disaster recovery and business continuity plans that best suited their RPO and RTO objectives while staying within their budgetary constraints.
* Consistently high weekly/monthly billing with no time, work, or billing disputes from clients.  Focused on achieving only the highest standard of customer service and client satisfaction.

Senior Infrastructure and Security Consulting Engineer

Geotech Environmental Equipment, Inc

Worked closely with department heads, interns and consultants to handle technology-based concerns from daily operations to large-scale projects for business growth.  Part of ‘decision-makers’ group comprised of major department heads responsible for driving company policies, procedures, with business growth and increased market share as the ultimate goal.
Selected Contributions:
* Designed, implemented, and maintained a help desk to increase IT-to-user interface, document resolution procedures, and cut down resolution times for user-level issues.  Consistently high level of customer satisfaction as evidenced by survey and peer review results.
* Upgraded unsecured Terminal Services-based remote access to secured, high-availability Citrix Presentation Server/XenApp architecture.
* Oversaw the successful installation of a new server room/data center environment during corporate hub facility relocation/construction.  Access control considerations and environmental controls were of primary focus.
* Devised and implemented information security policies, procedures, and systems to maintain data integrity and confidentiality at all organizational levels and needs.  Maintained monitoring systems and applications for productivity, employee safety, and company liability requirements.
* Maintained annual IT department budget and obsolescence scheduling for all technology-related assets from procurement to retirement.  Audited usage and licensing statistics for all enterprise applications in compliance with company and regulatory policies.
* Conducted comprehensive training and support programs for all users on topics including productivity software efficiency, personal computing best practices, and security and identity protection.
* Maintained informative IT-related blog on company Intranet to support user success.

IT and Security Director

CISO/vCISO | IT/IS Leadership | Mentor | MSc., CCSP, CISM, CRISC, CMMC RP

I believe that all businesses are at risk - hackers, crackers, nation states and bad actors - but small- and medium-sized businesses have to defend themselves against the same threats as the major corporations with fewer resources at their disposal.  Who helps small business leaders navigate the murky waters of risk management, governance, compliance, privacy, and guerilla marketing campaigns?

Well...  I do.

I've some spicy takes coming on this Forbes article regarding the ongoing saga of General Motors selling #consumer telemetry #data to #databrokers like LexisNexis and Verisk.

https://lnkd.in/gvhegNDu

The article leads with a description of SmartDriver as, "an optional program that provided users with data about their driving."

That's *almost* right.  That was the stated claim of the program when presented to consumers, but the grownups in the room know that the program exists based on the prospect of monetizing that data.  Let's not kid ourselves; we all know that #consumerdata is a gold mine that corporations can capitalize on over and over and over and over and...

Yes.  Forever.

Elsewhere in the document, the author states, "GM said it is working on 'enhanced privacy controls' aimed at greater transparency."

This isn't an instance of the author being disingenuous; I am sure that GM very much *is* working on being more transparent about what they'll do with data collected from consumers through their products.

But they won't stop collecting that #personaldata and under no circumstance will they stop monetizing it.

And THAT is the problem, isn't it?

Vote with your wallets.  Take the steps available to you to stop trackers.

Want to know more?  Let's chat.

OH AND BY THE WAY...  I'll be speaking at Rocky Mountain Information Security Conference (RMISC) about this and other topics related to my assertion that we're still, sixteen states in, doing #privacy legislation wrong here in the US.  Hope you'll join me.

Taplio

Mike Pedrick, CISSP's Linkedin Analytics

Mike Pedrick, CISSP

Mike Pedrick, CISSP's Best Posts (last 30 days)

Want to drive more opportunities from LinkedIn?

Taplio

.css-1jgreyo{background-image:linear-gradient(284deg, rgba(39,43,72,1) 0%, rgba(33,47,183,1) 100%);color:transparent;-webkit-background-clip:text;background-clip:text;}Mike Pedrick, CISSP's Linkedin Analytics

Mike Pedrick, CISSP

Mike Pedrick, CISSP's Best Posts .css-qqfgvy{font-size:var(--chakra-fontSizes-md);}(last 30 days)

Want to drive more opportunities from LinkedIn?

Mike Pedrick, CISSP's Linkedin Analytics

Mike Pedrick, CISSP's Best Posts (last 30 days)