A surgeon, a bank’s security architect, and a mission to protect the businesses a nation runs on.

The work is less glamorous than it sounds. You look for the admin account that should have been closed years ago and still opens the door. You test the backup nobody has ever restored. You read the exception somebody granted for two weeks and never took back. Then you carry the finding into a room, a board, a management committee, a supplier risk committee, and you say the true thing out loud in front of the people who paid for the work and would have preferred a different answer. Sam did that across a large share of the Fortune 100. He is CISA and CRISC certified with a B.S. in Computer Science from the Illinois Institute of Technology.

For most of a decade he was also senior managing partner of a Chicago-based distributed outsourcing business. He designed and ran the security framework for hundreds of staff across Latin America and Asia who handled regulated data every working day, under CISO oversight. No reportable breach during his tenure. That is a different kind of proof from an assessment report: he was not grading somebody else’s program, he had to live inside his own.

AccuSights began at home, and this is the part Sam does not tell from a stage. Businesses in his own family, including healthcare practices, were breached, and one of them was a payroll breach: the money people were counting on that Friday, in a business run by people he has known his whole life. He had spent twenty years telling the largest institutions in the country how to stop exactly that. He went looking for something his family could buy and found nothing reasonable at their size, because what a bank takes for granted was not for sale to a fifty-person company. That is why the promise on our home page is the one it is. Take the vacation you earned, land, and payroll is still there. Three convictions he has held for twenty years run through everything the company sells. Compliance is a by-product of running securely, never the reverse. If you are not compliant every minute, you are not compliant at all. And the audit is not the exam; the attacker is.

Clinicians are trained to keep working when the equipment fails, and she did. What she did afterwards is the unusual part. She made protecting hospitals her second vocation and learned cybersecurity to the depth where she holds her own in any technical room, with any engineer in it, and she brought the discipline of surgery with her. Nothing skipped, nothing assumed, every step verified, because a checklist you skip is a patient you lose. At AccuSights she leads the healthcare and defense programs, from the single practice to the multi-site hospital group, and she is the reason our controls are designed with clinicians rather than against them.

Ask a hospital administrator or a practice owner who they would rather have on the other end of the line when the systems go dark: a portal, or a doctor who has stood in that corridor and now knows exactly which control would have kept the lights on. Few cybersecurity companies are led by a physician who has operated on patients and now protects the systems that make surgery possible.

At AccuSights he builds the alliances that let a regulated business get everything from one partner: enclave and cloud providers, auditors, insurers, and the channel partners who bring us to the companies that need us most.