Ben Thomas

Background

About Ben Thomas

I’m not your ordinary information security and compliance guy. With a startup and technology background, I love using innovation and creativity to bring fresh, new ideas to the companies I work with. That’s why we do penetration testing differently at Practical Assurance — we’ve created an entirely new process designed specifically for startups and SMBs that’s, well, practical, as well as simple, actionable, and auditor-friendly (you’re welcome). After helping hundreds of startups and small companies pursue their SOC 2 audits, I witnessed 3 things:(1) they were being charged what a corporation can afford, not a startup (2) the process was so cumbersome it was completely disruptive to the team, and (3) the report was underwhelming, with no useful translation to various team members (executives, the board, engineering, sales, etc.), leaving them no more secure (.and isn’t that part of the point!). My team and I took our decades-long experience as security and compliance professionals and turned pentesting into something that’s not only far more accessible to startups, but actually leaves a positive imprint on their development processes, enhancing their overall security as a result. Specialties & Certifications: CISSP, CISA, CISM When I’m not working, I’m out playing the Mandolin (any bluegrass fans out there!) I have more hobbies than I can count (or have time for) including ham radio, photography, and algorithmic trading/system trending following. I love building things and get bored if I'm not continuously learning.