Building Trust In a complex world

Resiliam brings consistency, clarity, and discipline to information security, privacy, and AI governance. We are the partners you trust when the stakes are high.

our story

Since 2006, Resiliam has helped organizations meet demanding compliance requirements with clarity and confidence. We guide you in applying industry standards in practical ways that protect your systems, safeguard sensitive data, and stand up to auditor and client scrutiny.

Our proven methodology brings structure and simplicity to your certification journey from kickoff through audit – so you know what to do, when to do it, and why it matters. With more than 150 ISO certifications completed, organizations across industries trust Resiliam to reduce risk, simplify compliance, and deliver peace of mind.

implementations

0 +

years of excellence

0 +

“In today’s environment – where certification demands are accelerating and frameworks are rapidly converging – clarity means a partner fluent in both compliance and commerce.”

Leadership Team

Guided by decades of experience in security leadership, governance, and business strategy.

Michael Johnson

managing member

Michael is the founder and managing member of Resiliam. Michael’s duties include leading the firm’s strategic direction, business development initiatives, and financial management functions.

Michael brings more than 45 years of experience in information security leadership and organizational security services to his role. Prior to founding Resiliam, he led a team of over 20 IT security professionals, overseeing a comprehensive range of security consulting services including policy development, program implementation, technical assessments, and incident response.

Michael previously spent 20 years with the Northeast region’s leading provider of organizational security services, where he was responsible for the marketing, sales, management, and delivery of outsourced security services. His portfolio encompassed information and computer security, physical security, training, investigations, technical services, and uniformed security officer services.

Michael attended Norwich University, where he earned a B.A. in Criminal Justice and an M.S. in Information Assurance. He also completed Northeastern University’s Executive MBA program.

David White

Partner, COO

David is a partner at Resiliam and serves as the firm’s chief operating officer. In addition to his COO duties, David leads the firm’s information security and business continuity practices, with a particular focus on ISO 27001, ISO 22301, and SOC 2.

He is also actively involved in serving clients across the firm’s entire suite of practice lines, including data privacy, artificial intelligence governance and cloud security.

Prior to joining Resiliam, David spent nearly two decades in management consulting. He served in leadership roles at two strategy consulting firms within the financial services industry, advising management at top global investment banks, commercial banks, and asset managers on business and sales strategy, new product development, pricing optimization, institutional relationship management, competitive benchmarking, and brand strategy.

David graduated Phi Beta Kappa, with Highest Honors, from Princeton University.

Paul Johnson

Partner

Paul is a partner at Resiliam and leads our Privacy practice and oversees our CMMC and AI Governance business lines. Paul is actively engaged in client work across the full portfolio of our services and works with other team members as a relationship partner for numerous engagements. Additionally, Paul serves as the firm’s technology lead for our internal IT operations.

Paul has served as the senior IT executive in leading healthcare service and analytics firms including Health Dialog, Best Doctors and ISO Claims Partners. In these roles, Paul was responsible for all aspects of IT including information security, privacy, software development, technology operations, and strategy. His experience ranges from consulting on information security to operations management and business development activities in the US and Europe. In addition to healthcare, Paul held a leadership role in a large SaaS provider to the automotive industry, where he was responsible for corporate operations, information security, and PCI compliance.

Paul holds a BA from Tufts University and an MBA from Northeastern University’s High-Tech MBA Program.

What Our Clients Say About Us

“Resiliam is not just an extension of your team – they also serve as an extension to our entire industry.”

“Resiliam’s expertise allows CIOs and security personnel to feel empowered and informed, making it easier to adapt the management system to the organization’s culture.”

“Thanks to their support, we achieved clean audits in record time and now have robust systems in place that enhance our security, privacy, and business continuity, positioning us for sustained success.”

“I have had the opportunity to work with Resiliam at multiple organizations and through many audits, and it has always been an exceptional experience. Their expertise in ISO standards has been invaluable.”

“I highly recommend Resiliam not only for their expertise, but also for their professionalism and ethics, which is what has made them a long-term partner for our firm.”

“Partnering with Resiliam has helped us maintain a consistent record of exemplary audit results from independent assessors for years.”

“Resiliam is a true partner! They provide critical governance, risk, and compliance expertise in your journey to certification and your continuous improvement activities afterward.”

Built on governance

“We help organizations earn and maintain trust by simplifying security, privacy and AI governance requirements. Through disciplined execution and uncompromising integrity, we turn complex standards into practical outcomes – using governance as the operating foundation that makes risk and compliance efforts effective, consistent, and sustainable over time.”

Trust

Building confidence with stakeholders.

Clarity

Demystifying complex regulations.

integrity

Unwavering commitment to ethics.

Trust

Building confidence with stakeholders.