Who writes this.

I’m Ryan Freeman-Jones. I spent the better part of a decade at a US-based healthcare cybersecurity and compliance advisory and audit firm, where I started out running assessments and ended up as the partner leading the entire audit and consulting practice, along with operations, IT, and the P&L. In between I built the firm’s West Coast practice from scratch. Our clients were mostly in healthcare, with others across regulated industries, all organisations that get inspected constantly, and the work covered SOC 2, HITRUST, HIPAA, risk and maturity assessments. While I helped run the firm it was ranked Best in KLAS twice and took on private equity investment.

I’ve been on the other side of the table too. I was the SVP and CISO of a practice-management and EMR company in the eye care space, about two thousand employees, where I owned security, privacy, compliance, and internal audit. For years I was the one answering everyone else’s evidence requests. You learn a lot about audit firms that way, including which ones you’d hire.

I’ve taught as well. I helped design a university Masters program in cybersecurity and lectured for several years, which probably explains why these pieces try to teach rather than impress.

And I’ve never stopped being technical. I came up through hands-on security work, ethical hacking and medical device security included, and at the firm I rebuilt our HITRUST service line around technology and automation, working directly with HITRUST. Twenty years on, I still write software most days, much of it now with AI in the loop. The pieces here about AI come out of that daily work.

I’m not selling anything here. No course, no template pack, no webinar at the end. If you think I’ve got something wrong, the contact form is at the bottom of the home page, and I’d genuinely like to hear it.