Consulting Services
Delivering military-grade cybersecurity strategies to secure enterprise infrastructure, assess complex risks, and ensure operational resilience against advanced threat actors.
Dave Roy, CISSP, is a U.S. Air Force veteran with more than 20 years in cybersecurity and enterprise security. He works with organizations that need senior security guidance without a full-time hire: security architecture and Zero Trust design, incident response planning, virtual CISO advisory, and risk assessments mapped to NIST CSF, NIST 800-53, ISO 27001, and the CIS Controls.
Cybersecurity Consulting
Strategic advisory tailored to your unique architectural footprint. We bridge the gap between technical execution and business objectives to construct robust defensive postures.
- Security Architecture Design & Review
- Incident Response Planning & Tabletop Exercises
- Security Awareness Training Programs
- Zero Trust Framework Implementation
- Virtual CISO (vCISO) Advisory
Risk Assessment
Comprehensive evaluation of vulnerabilities across your digital ecosystem. We deliver actionable insights prioritized by business impact and threat severity.
- Comprehensive Vulnerability Scanning
- Compliance Gap Analysis (NIST, ISO, CIS)
- Third-Party / Vendor Risk Evaluations
- Cloud Infrastructure Audits
- Data Privacy & Protection Assessments
How Engagements Work
Every engagement starts with a free 60-minute intro call. From there, pick the model that fits how much help you need and how often.
Rapid Risk Assessment
A 1-2 week deep dive on a single focus area, such as cloud posture or a Zero Trust gap analysis, with written findings, a prioritized remediation roadmap, and an executive readout.
Fractional Advisory Retainer
Ongoing virtual CISO-level strategic guidance with a set number of advisory hours each month, plus priority access between sessions. Ongoing, cancel anytime.
Ad Hoc Advisory
Help with one-off questions or short reviews, with no minimum commitment.
Credentials and Focus Areas
Certifications
- CISSP (ISC2)
- ISC2 Certified in Cybersecurity (CC)
- CompTIA Security+ ce
- AWS Certified Cloud Practitioner
- Dragos ICS/OT Training
- U.S. Air Force veteran
Focus Areas
Cybersecurity strategy and roadmaps, GRC and cyber risk, Zero Trust, identity and privileged access (IAM/PAM), cloud and network security, SIEM/SOAR/EDR/XDR strategy, MDR and SOC advisory, incident response readiness and tabletop planning, OT/ICS and critical infrastructure, vendor strategy, and business continuity and resilience.