EXPERIENCE
Steve Maxwell has 25 years of technical experience ranging from software development to software quality, performance engineering, Information Security, and audit. Before TrustedSec, Steve performed a number of IT functions supporting security initiatives across multiple industries. He has presented to hundreds on topics of automation, performance engineering, and information security.
EDUCATION & CERTIFICATIONS
- Bachelor of Science, University of Utah
- Certified Information Systems Security Professional (CISSP)
- Qualified Security Assessor (QSA)
- Certified Information Systems Auditor (CISA)
- Certified Data Privacy Solutions Engineer (CDPSE)
- ISO 27001 Lead Auditor
- CMMC Registered Practitioner
PROFESSIONAL AFFILIATIONS
Information Systems Audit and Control Association (ISACA)
PASSION FOR SECURITY
Steve’s passion for security is in helping his clients to improve their security and in preparing them to be ‘the smartest in the room’.
Featured Blogs And Resources
Discover the blogs, analysis, webinars, and podcasts by this team member.
Book Review - The Definitive Guide to PCI DSS Version 4
As a PCI QSA, I have answered numerous questions about the new PCI DSS Version 4. With over 500 total controls, and at least 100 of them unique to this…
Network Segmentation for the Rest of Us! How to get your segmentation project moving toward zero trust.
Implementing network segmentation can limit internal movement, improve access control, and slow down attacks, allowing for more time to react and reducing…
Strength Training With Transport Cryptology: Part 2
Review the latest PCI Security Standards Council (PCI-SSC) guidelines for evaluating application cipher suites and ensure compliance with version 4.0 standards…
InfoSec World 2026
TrustedSec is proud to sponsor and have a booth at this year's InfoSec World!
Wild West Hackin' Fest 2026
We're thrilled to sponsor this year's Wild West Hackin' Fest and we'd love to see you at our booth!
GrrCON 2026
TrustedSec is proud to sponsor and have a booth at this year's GrrCON!
AMA: CMMC Phase II Suspension and Beyond
Join Director of Advisory Services Chris Camejo and Compliance Practice Lead Lee Quinton for an expert breakdown of the recent CMMC changes and how to prepare…
AI Offense is Not Noclip Mode
AI doesn't let attackers walk through walls, but it makes finding the cracks more efficient. In this blog, we cut through the hype and explain what AI-driven…
A Vault With No Treasure - CMMC Level 2 Compliance for Subcontractors With No CUI
This blog post should not exist, but it does. In this blog, we detail the improper CMMC Level 2 flow-down problem and the most cost-effective path to…
NewsNation - Cyberattack knocks out California city’s 911 operations
A cyberattack recently forced Suisun City, CA to declare a state of emergency after its 911 dispatch systems were compromised. Advisory Solutions Director Alex…
Empower your business through better security design.
Talk directly with our experienced advisory consultants to learn how we can help.
