I work in privacy, cybersecurity, and regulatory compliance, helping organizations make sense of complex requirements without unnecessary fear or wasted effort. My focus includes HIPAA, CUI, ITAR, NIST 800-171, export controls, and emerging risks such as AI and automation — with an emphasis on how these requirements are actually applied, examined, and enforced in real-world operations.

This space is where I share practical insight drawn from real compliance work: what changes matter, where organizations get tripped up, and how to make defensible decisions when handling sensitive data. If you’re responsible for compliance or privacy oversight and value clarity over noise, you’ll find ongoing guidance here designed to help you stay prepared rather than reactive.

If you would like to support my work and the free training resources I provide, you can do so by buying me a coffee or by joining a membership for ongoing regulatory insight, office hours, and structured compliance guidance.