His expertise includes regulatory compliance (HIPAA and FISMA) and cybersecurity risk management. He has helped numerous institutions tackle HIPAA compliance and is responsible for developing a NIST based risk management framework and using it to align IU's central research cyberinfrastructure with HIPAA. His past experience includes nearly two decades of developing, delivering, and managing IU's central research cyberinfrastructure including services such as Unix support, distributed storage, computational grids, and HIPAA aligned solutions for clinical researchers.