Linda Fischer Brown

About Linda Fischer Brown

I’m a seasoned professional with 25 years of experience in technology and cybersecurity realms. My unique perspective, cultivated through both corporate and vendor roles, has equipped me with an unparalleled ability to help small & medium businesses implement processes and procedures to improve their security posture, security sustainability, and governance maturity. Navigating Compliance Landscapes with Precision Automated compliance tools act as a catalyst for rapid program development. These tools not only offer a snapshot of current security posture against standard frameworks but also position organizations for growth and successful audits aimed at securing important certifications like SOC 2 Type II, HIPAA, HITRUST, ISO27001, GDPR, CMMC. CASE STUDY: Guiding Compliance, Enabling Sustained Maintenance They presented me with the formidable task of achieving SOC 2 Type II compliance within a tight six-month timeframe. Even with the invaluable support of automated tools, there were nuanced risk dialogues, policy determinations, and control deliberations that required the finesse of a seasoned CISO. My robust security experience (CISSP), and a solid foundation in risk and compliance, led to successful obtainment of the certification. Compliance Looks Good on You with Viridis Security The birth of Viridis Security was driven by a vision to help small and medium-sized businesses achieve compliance and certification, minus the necessity of an in-house CISO. Our dynamic vCISO services, coupled with best-in-class compliance automation tooling, uniquely position us to assist companies seeking to obtain or maintain certification. Relevant Accomplishments * 6 Years at Kenna Security (Employee #30) helping customers from all industries improve their vulnerability management programs to focus on true risk, not potential scores.* Acting ISO for super-regional bank working with IT Operations, Physical Security, Fraud, Vendor (3rd Party) Assurance, Business Resilience/Continuity & Disaster Recovery (BC & DR), Payments, Application Security & Penetration Testing, Identity & Access Management (IAM), Audit, Risk, Information Security Training & Awareness and other teams to assure and improve security systems across the bank including reporting, policy management and program management.

Experience

1. Founder

   Viridis Security

   Jul 2023 — Present · Providence, RI, US

   Security is hard. Proving compliance is harder. I help companies working to obtain or maintain certification against existing frameworks: SOC2, GDBR, PCI, ISO27001, HIPPA, etc. Whether you need ground up creation of policies, controls, processes and procedure or if already have a great program and are looking for CISO advice without hiring a full-time resource, I can help. Virtual CISO (vCISO)Automated Compliance tool managed service provider (MSP):* Drata* Vanta* SecureFrameSecurity Implementation advice and guidance * Vendor (3rd Party) Assurance programs* Asset Management* Application Management* Risk Management* Information Security outreach, trainingand more.

Education

• Wittenberg University

  BA, Psychology and East Asian Studies with an Education Minor

  1988 — 1992