Welcome to D. W. Stacy & Associates

Our firm provides cybersecurity consulting and advisory services to both for-profit and non-profit organizations.  Most of our consultants have over 25 years of leadership experience in information risk management and cybersecurity.  We work with organizations to help them understand cybersecurity risks that may impact them and help them build, or mature, their cybersecurity program to effectively address and manage those risks in a manner consistent with their risk tolerance, or "appetite."  We believe in a risk-based approach to cybersecurity, rather than a compliance-based approach.  We've observed that a compliance-based, or "check the box," approach is very common in many organizations today. This often results in focusing on the wrong issues and investing resources (money and people) in processes and technology with a low return-on-investment (ROI) potential.  We invite you to review the services that we offer and contact us for a free, no obligation consultation to determine if we can meet your needs.