Mr. Anderson, MCSE, CCNP, CISSP, CEH

Consulting CISO & Certified Ethical Hacker

Mr. Anderson is a “white hat” ethical security hacker and business continuity advisor with extensive experience in the development & implementation of security-focused audit and control programs. He is highly sought-after for his expertise in Cyber Security & Technology Assessments, including: security architecture reviews; penetration/vulnerability testing; business resiliency, disaster recovery and other remediation strategies; hardware system selection and configuration; cloud application security reviews; and wireless security assessments.

Mr. Anderson has a deep understanding of industry standards and extensive experience with internal controls evaluation, COSO, COBIT, ITIL, ITGCC, GLBA audits, and ISO, SOX 404 compliance requirements, including all phases of planning, evaluation, documentation, testing and remediation. He advises clients on merchant compliance with the Payment Card Industry Data Security Standard (PCI), as well as Health Insurance Portability and Accountability (HIPAA) privacy and security rules. He holds several globally recognized certifications for IT assurance and security, including: Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Cisco Certified Network Professional (CCNP), a Microsoft Certified Solutions Expert (MCSE), and an Amazon Web Services Certified Solutions Architect Professional (AWS CSAP). Mr. Anderson tests and monitors clients’ IT environments, including network topologies, firewalls and other security solutions, VPN configurations, hardware infrastructure design, and IT policies and standards. He identifies any potential system integrity exposure and control weaknesses and advises internal control owners to appropriately define and implement risk mitigation plans. He provides solutions that allow clients to cost-effectively address compliance obligations, validate their control environment, and better rely on their technologies to support complex business processes.

Education

Bachelor of Computer Science

Prior Experience

Healthcare Industry – Information Security Analyst
Manufacturing & Distribution – Senior IT Security Administrator
Manufacturing & Distribution – Senior CDR Engineer
United States Navy – Cryptologic Technician and SERE School Instructor

Publications

AAFCPAs eBook: Best Practices for Reducing IT & Cyber Risks

Professional Associations

Information Systems Audit and Control Association (ISACA)
The SANS Institute

Contributed Insights

Why Strong Internal Policies Are Critical for Audit Readiness and Cyber Risk Protection

In this article: During IT General Controls (ITGCs) assessments performed either as part of financial statement audits or full IT security audits, AAFCPAs often identifies gaps in client policies and procedures that can leave an organization exposed to regulatory violations, operational failures, and reputational risk. Defined operational protocols for data security, breach response, and system […]

How Ethical Hacking Strengthens Cybersecurity and Prevents Data Breach

Would you or your IT team recognize the signs if one or more of your systems had been breached? How much sensitive data could they access prior to detection? How long would your operations be disrupted were an attack to lock you out? Cyber-attacks are a constant risk that affect organizations across industries, and the […]

Cyber Insurance in 2025: What CFOs and Risk Managers Need to Know to Avoid Costly Gaps

As cyber threats evolve in both sophistication and scale, cyber insurance has moved from a niche policy consideration to a cornerstone of business continuity and enterprise risk management. For many organizations, coverage is now a condition of financing, contract renewal, or fiduciary oversight. Yet many policies still fall short, especially when the scope of coverage […]