Our Story

Security consulting built on integrity and hard-won expertise.

Rowan Tree Cyber is a Maryland-based, disabled veteran-owned small business providing independent cybersecurity compliance consulting to organizations that take security seriously.

The Practice

Rowan Tree Cyber was founded with a clear purpose: to make rigorous cybersecurity compliance accessible to organizations that can't afford large consulting firms but need real expertise. We specialize in ISO-based compliance frameworks and certification preparation — the kind of work that requires both technical depth and practical judgment.

The name is intentional. The rowan tree is an ancient symbol of protection and resilience — used for centuries as a guardian against harm. That's what sound security practices should be: a living, rooted defense, not a one-time checkbox.

Expertise & Credentials

As a certified ISO 27001 and ISO 42001 Lead Auditor, I bring structured audit methodology and deep framework knowledge to every engagement. This dual certification is relatively rare and positions Rowan Tree Cyber uniquely to serve organizations navigating both traditional information security requirements and the rapidly evolving landscape of AI governance.

Beyond ISO work, our practice covers CMMC 2.0 certification readiness for defense contractors, ITAR compliance for export-controlled environments, NIST CSF and SP 800-171 assessments, and CUI handling program development.

How We Work

Every engagement starts with an honest assessment of where you are. We don't sell fear, and we don't oversell scope. You get a clear-eyed view of your gaps, a realistic roadmap, and practical support to close them — whether that's documentation, training, policy development, or audit preparation.

As an independent consultant, I work directly with your team — not as a distant report-generator, but as a partner in the work. You'll have direct access throughout the engagement.

Our Values

The values that guide us

Integrity First

We give you an honest assessment of your security posture, even when that's harder to hear than a clean bill of health.

Practical Over Perfect

Certification-ready security programs that your team can actually operate and maintain — not theoretical ideals that erode after the auditor leaves.

Right-Sized Solutions

Services calibrated for small to mid-size organizations — proportionate to your risk, resources, and growth stage.

Mission-Driven

As a disabled veteran-owned business, we bring the same discipline and accountability to client work that military service demands.

Let's talk about your compliance goals.

Whether you're starting from scratch or strengthening an existing program, we're ready to help.