Chris Vanevery

Background

About Chris Vanevery

A technical cybersecurity leader with 15 years of experience focusing on assisting organizations achieve and efficiently maintain compliance with regulations, understand their cybersecurity readiness, and expand their cybersecurity capabilities. Throughout his career, Chris has advised senior executive leaders, CISOs, and technical SMEs across a wide range of cybersecurity topics from cybersecurity strategy, federal cybersecurity compliance, cybersecurity defense-in-depth, scope/risk reduction, and more. In addition, Chris has focused on the development and growth of his teams, providing technical education, mentorship, and guiding hand in their careers and advancement. He takes a people-focused approach to growing and developing teams, while providing deep technical experience to both his colleagues and clients. Key technical and delivery experience- Cybersecurity Assessment - Cybersecurity Program Strategy and Roadmap - Strategic Planning and Execution - Governance, Risk, and Compliance (GRC)- Cybersecurity Audit Remediation - Cybersecurity Leadership - CISO Advisory - Board-level reporting - Cross-Functional Collaboration - Data Security & Privacy - Cyber Resilience - DevSecOps - Threat Modeling - Network Architecture - Project Management - Threat and Vulnerability Management (TVM)- Security Operations Center (SOC)- Third-party Risk Management (TPRM)- Cyber Supply Chain Risk Management (C-SCRM)- IT Asset Management - Zero Trust Security - Operational Technology (OT) Security - Application and Product Security - Physical Security - Team Management, Growth, and Mentorship - M&A Security and Due Diligence - Cybersecurity Culture Industry focus- Aerospace & Defense - Industrial Manufacturing - Government - Telecommunication - Technology - Power and Utility - Healthcare - Higher Education - Retail - Media and Entertainment Regulations, Frameworks, Standards: CMMC, FedRAMP, FISMA, ISO 27001/2, NIST 800 series (NIST 800-53, NIST 800-171, NIST 800-161, NIST 800-37, and more), NIST CSF, Risk Management Framework (RMF), CIS Top 18, PCI-DSS, DFARS Active Certifications: CISSP, CMMC RP