Hans Study

About

Most of my work is CPCSC readiness for Canadian defense suppliers. That covers scoping what falls inside the assessment, closing gaps against the ITSP.10.171 controls, writing the policies and the system security plan, and getting ready for the Level 1 self-assessment at contract award or a Level 2 third-party assessment. U.S. bids add CMMC. Suppliers that sell on both sides of the border get the CMMC and NIST SP 800-171 crosswalk in the same engagement.

The other half is network security across IT and OT. I run vulnerability and network security assessments, review firewall and switch configurations, and design segmentation for industrial and building systems using IEC 62443 and NIST SP 800-82. The findings repeat. Flat networks, shared admin accounts, and remote access that nobody tracks show up in most of the environments I review.

I also take on ISO 27001 readiness and fractional CISO work for small and mid-sized organizations, and physical security systems where they meet the network: CCTV, access control, and VMS health checks.

I work alone, mostly remotely, with clients across Canada and the United States. I hold the CISSP.

Services

• Security readiness and gap assessment
• Governance, risk, and compliance advisory
• Network security architecture and firewall review
• OT and industrial control system security
• Vulnerability assessment and management
• Fractional and virtual CISO

Frameworks

• CPCSC (ITSP.10.171)
• CMMC
• NIST SP 800-171
• ISO/IEC 27001
• IEC 62443
• NIST SP 800-82
• NERC CIP
• ITSG-33
• NIST SP 800-53
• CIS Controls

Credly badges

Issued to Hans Study and verified by the issuer through Credly. Select a badge to see its verification page.

Certifications

• CISSP, ISC2 (2017) Verified by Credly

Each certification is confirmed by a matching Credly badge issued to Hans Study.