I'm Michael Herrera.

I've spent 15+ years keeping enterprise systems secure. I hold the CISSP and CISSO certifications, and I work out of New York.

My focus is enterprise security management, risk, and compliance. I've led teams through day-to-day operations and rolled out new services across a range of industries.

I work hands-on with firewalls, CASB, MFA, endpoint protection, EDR, UEBA, asset management, and insider risk tools. That matters because governance written by someone who's never run the tools tends not to survive contact with the people who do.