Engagements · Research · Resources · Projects
Client case studies are anonymized by default: sector, stage, and outcome — never client names or confidential detail.
Led the security and compliance workstream to meet a new Virtual Asset Service Provider framework on a regulator deadline, alongside an ISO 27001 certification.
Outcome: Evidence packages delivered within regulator deadlines; ISO 27001 achieved without slowing product releases.
A working paper mapping Argentina's VASP framework (CNV RG 1058/2025) against the CryptoCurrency Security Standard (CCSS), and tracing the country's crypto-regulatory evolution and its information-security requirements.
Argentina's Virtual Asset Service Provider framework (CNV RG 1058/2025) mapped article-by-article to ISO/IEC 27001:2022 controls — a sample of the full crosswalk.
Designed a distributed, end-to-end encrypted backup system as a proof of concept — multi-device agents syncing to a central server under a zero-trust, pre-authorization model.
Outcome: A coherent, threat-informed architecture: layered RSA-2048 + AES-256 encryption, SHA-256 differential sync, per-agent isolation, and audit logging — validated as a design, with defined targets for throughput and low overhead.
Fractional CISO, regulatory & VASP readiness, ISO 27001 / SOC 2, or a specific security problem.