Who we are
We are an independent professional services firm. We give senior advice, build programs that last, and prepare organizations for the audits, assessments, and customer reviews that matter most to their business.
About
Practitioners first. Advisors by design.
Trustalis is a governance, risk, and compliance firm led by senior security practitioners. We help organizations build security, privacy, and resilience programs that satisfy auditors, customers, and regulators, and that hold up in daily operations.
Experience
Our senior practitioners bring 15 years of hands-on experience in information security, risk, and compliance across regulated sectors, including financial services, healthcare and life sciences, the defense industrial base, government and the public sector, technology and SaaS, retail and e-commerce, and hospitality.
That experience includes leading security for defense and public-sector organizations and extensive ISO 27001 implementation work.
Client confidentiality is the default in everything we do.
How we work
Programs that run, advice you can act on.
We build programs that run
We design controls and processes around how your teams already work, so the program keeps running after the engagement.
We work inside your environment
We use your existing tools, ticketing, document stores, and meeting rhythms wherever we can, rather than adding new systems to manage.
We give executive-ready advice
Leaders get clear options, tradeoffs, and a recommendation they can act on. We are direct about scope, so you always know what to expect.
Credentials
Certifications and academic background.
Credentials held by our practitioners.
Certifications
CISSPC-CISOCISMCISAPCI QSACMMC RP
Academic background
- —MBA, IT Management
- —Bachelor of Science, Cybersecurity
Trustalis provides advisory, readiness, and assessment services and works alongside your auditor or assessor of choice. Certifications and attestations are issued by accredited bodies: PCI DSS Reports on Compliance by PCI SSC-approved QSA companies, and CMMC certification assessments by authorized C3PAOs.
Let's talk about what is next.
Building a program, preparing for an audit, or looking for senior security leadership? Tell us what you are working on.