I will be your consultant for a policy, technical standard, process, procedure

I write professional Information Security Policies, Standards, Procedures, and Playbooks — tailored to your organization’s size, industry, and compliance needs (ISO 27001, HIPAA, NIST, etc.).

Yes. I align each document to industry standards such as ISO/IEC 27001, NIST SP 800-53, NIST CSF 2.0, and the HIPAA Security Rule.

Absolutely. I specialize in audit-ready documentation, including Statements of Applicability (SoA), Risk Treatment Plans, and policies that support certification and regulatory audits.

 Basic: 1 foundational policy (e.g., InfoSec Policy).  Standard: Full Basic: 1 foundational policy (e.g., InfoSec Policy).  Standard: Full set of core policies + technical standards.  Premium: Audit-grade, regulation-ready documents tailored to your specific industry and control set.

I conduct a structured discovery during our consultation — assessing your business size, systems, and industry threats — and then tailor documents to your actual environment.

Yes. If you choose the Standard or Premium package, the documents will be formatted, mapped to controls, and ready for due diligence, audits, or vendor assessments.

You’ll receive editable Word (.docx) files unless otherwise requested. PDF versions are available for finalized versions.

Each page is fully formatted, structured, and reviewed for clarity, alignment, and accuracy. Premium-level documents include control mappings, appendix tables, and definitions.

Yes. Revisions are included as per the package, and I offer additional pages or document add-ons upon request.

Upon request, I can provide a sanitized sample. If you're ordering the Premium package, I also include a strategy consultation to define the scope and structure of your deliverables.