Supply chain and third-party risk, automated.
Open to full-time roles and fractional engagements.
I map who a business depends on, find the single points of failure hiding a tier or two down, and build tools and AI agent workflows that make that work repeatable, with a person checking every step.
Case study
A snack company thinks it has two packaging suppliers. Both rely on the same film plant one tier down, so it really has one. The study shows how to find that kind of hidden dependency, rank it, and set controls that buy time.
Fictional company; all numbers are illustrative.
Framework
An 8-stage method for auditing a business's supply web, from scope to a signed risk report. A person or an AI agent can run it, and a person signs off before each stage moves on. Every claim is labeled as established, assumed, or a gap.
A method, not yet tested on a real client. The included walkthrough uses a fictional company.
Tool
Reads a security policy and maps each requirement to NIST SP 800-53 controls, including the supplier controls SR-2 and SA-9. Each match shows why it scored the way it did, and weak matches go to an analyst review queue instead of being trusted blindly.
64 automated tests.
Tool
Helps someone document a cyber incident and produce reports they can hand to police or an attorney. Evidence is logged with SHA-256 hashes, so any later change to a record can be detected.
51 automated tests. Not legal advice.
Risk assessment
Nine scored AI-related supply chain risks, with controls, warning indicators (KRIs) and a 30/60/90-day plan.
Playbook
A reusable risk-analysis prompt and a worked example where an AI first draft is checked and corrected by a human reviewer.
Framework
Observable signs of how power, incentives and group behavior shape risk decisions, and how to turn them into solid findings.
Framework
How bias and pressure create supply chain risk, and how AI triage, audit evidence and human review help catch it.
Strategy
Plain-language game theory that explains why supply chain and AI risks persist, and which incentives to change.
Field guide
How a supply chain manager can use AI in six everyday jobs, and what to check before trusting it.
Case study
A cyber risk program for a fictional regional health system, built only from public sources.
Field guide
Nine practical ways AI can speed up IT audit work, from walkthroughs and SOC 2 review to auditing AI, with a human check at every step.
Field guide
Nineteen copy-and-paste AI prompts and short workflows for small local businesses: suppliers, ordering, forecasting, overstock and dead stock, vendor lead times, and supply risk. Works with any AI chat tool, with a human check at every step.
Tool
23 model-agnostic prompts for software and ICS/OT engineers, each with human gates at the start, middle and end.
Treat unapproved AI tools the way you would an unvetted vendor, with a 30/60/90-day plan to inventory them, tighten their permissions, and add checks before their output reaches anyone. All sources checked.
Start with the people who know the work, then draw who depends on whom.
Split the problem into small ideas and show how each one drives the next.
Turn the steps that repeat into tools or AI agent workflows, with a person checking the result.