Thomas Ward is an IT and cybersecurity leader who advises organizations on technology strategy, risk, and compliance, including CMMC and NIST 800-171. Ward's work also includes AI governance and nonprofit leadership.
Thomas Ward is an IT and cybersecurity leader whose writing turns technology and compliance concerns into practical decisions.
On CMMC, they argue that a changing certification timeline is no reason to pause protecting controlled unclassified information or improving NIST SP 800-171 controls.
On AI, they make the case for adoption alongside governance for data, access, vendors, and security.
Their posts also explore leadership beyond IT, including their experience as interim executive director of the Center for Creative Living and the value of helping organizations manage a transition between IT providers.
Ward pairs executive concerns with concrete next steps.
In the CMMC guidance, they redirect attention from a paused certification schedule to sustained security work.
The AI governance post balances opportunity with questions about data protection, access, vendor risk, and responsible use.
In a managed-services transition post, Ward describes sharing a checklist to help a prospective client retain important information, even if they chose another provider.
These examples show how Ward's work can help readers weigh practical security, technology, and operational choices.
Thomas Ward is an executive technology leader and consultant who prioritizes building sustainable, risk-aware IT strategies over short-term solutions.
Read more
Ward argues that regardless of shifting regulatory environments (such as the pause in CMMC Phase II) or rapid technological changes (like AI integration), organizations must proactively implement robust governance and security frameworks. Beyond corporate compliance, Ward demonstrates strategic versatility by applying extensive experience in executive leadership across diverse sectors, including non-profits, where success is often defined by community impact and operational sustainability.
Thomas Ward argues that governmental pauses or reviews of compliance programs, such as CMMC Phase II, do not diminish the responsibility of organizations handling Controlled Unclassified Information (CUI).
Read more
Rather than slow preparation during a regulatory pause, he recommends using the time to build a sustainable, documented cybersecurity program based on rigorous standards.
Ward recommends that organizations handling CUI use the CMMC suspension period to implement and mature NIST SP 800-171 controls, identify and remediate security gaps, and develop policies that work in daily operations, reducing business risk.
Ward asserts that Artificial Intelligence is a persistent, transformative trend, not a transient fad.
Read more
Ward's primary concern as an executive leader is that many companies are accelerating AI adoption far faster than their foundational governance, security infrastructure, and internal policies can support it.
Ward says companies need a clear AI governance strategy covering data protection, vendor risk, acceptable use, and regulatory compliance to ensure AI is used responsibly and securely.
As an IT consultant and executive lead, Ward adopts a philosophy that prioritizing client success and transparent knowledge-sharing is the most effective business model.
Read more
Ward believes that helping organizations solve complex technology challenges is worth more than closing a sales deal.
During a prospective client engagement, Ward created and shared a detailed checklist of what organizations should demand from their Managed Service Providers (MSPs) to retain control of their information and avoid common errors during service transitions.
Applying Corporate Strategy to Mission-Driven Leadership
Ward showcases the versatility of extensive executive experience by applying skills learned in highly complex, regulated industries (like cybersecurity and enterprise IT) to the non-profit sector.
Read more
Ward recognizes that while methodologies translate, the definition of success must adapt.
As Interim Executive Director for the Center for Creative Living, Ward manages operations, finances, and community engagement, applying skills in scaling large enterprises to mission-driven work with limited resources.
If you manage Controlled Unclassified Information (CUI) and are concerned about recent government announcements regarding CMMC, this post clarifies that the regulatory pause does not eliminate your security duties.
Read more
It offers a proactive framework for strengthening defenses rather than simply preparing to pass an audit.
Thomas Ward says that while CMMC Phase II undergoes review, organizations handling CUI remain responsible for protecting that data. Rather than treating the pause as a new deadline, they urge organizations to use the time to build a documented, sustainable cybersecurity program by implementing NIST SP 800-171 controls, identifying security gaps, and reducing risk.
For brands planning a campaign
For managed service providers (MSPs) and cybersecurity firms, this creates a clear consulting opportunity: offer gap assessments, SSP (System Security Plan) development, and fractional CISO advice during compliance transitions.
As AI becomes central to business strategy, many companies lack the governance and security policies needed to adopt it safely.
Read more
This article moves beyond the hype to identify the key questions leaders must answer: how to govern AI responsibly and protect against AI-enabled threats.
Thomas Ward describes AI as a sustained, integrating force, not a passing trend.
As a virtual CIO (vCIO), they are concerned that organizations are adopting AI faster than their governance, security protocols, and infrastructure can support it.
They call for a deliberate AI governance strategy covering data protection, vendor risk, and regulatory compliance.
For brands planning a campaign
Risk and technology strategy firms can use this as an opening to offer proactive AI governance audits, helping clients capture AI's benefits while avoiding significant regulatory or security liabilities.
For readers interested in Ward's leadership philosophy, this post explores their move from complex corporate and technical environments to the nonprofit sector, where leadership success is measured by community impact and operational necessity.
Read more
After two decades in IT, cybersecurity, and business leadership, Thomas Ward describes their recent work as Interim Executive Director for the Center for Creative Living. They reflect on how skills honed in the corporate world—such as managing budgets, operations, and difficult situations—translate to the nonprofit arena, where success often means keeping essential services running with tight resources.
For brands planning a campaign
Ward's executive experience spans highly regulated corporate sectors and mission-driven organizations, making them relevant to a range of clients.
If your organization needs experienced executive guidance without hiring a full-time, high-cost leader, this post outlines Thomas Ward's technology and compliance expertise and their capacity to provide fractional leadership across multiple critical domains.
Read more
Thomas Ward outlines their availability for consulting and contract opportunities, drawing on over 26 years of experience.
Their expertise spans executive roles (Fractional CIO/CISO/CTO) and sectors including government contracting, healthcare, hospitality, and gaming.
Key compliance areas include CMMC, NIST 800-171, PCI DSS, HIPAA, and digital transformation strategy.
For brands planning a campaign
Enterprises facing leadership gaps can use this post to assess Ward's fit for an immediate, seasoned executive presence to guide technology roadmaps and resolve project failures.
This post offers an ethical perspective on vendor relationships in IT and managed services, with practical advice on what clients should demand from any provider, whether they hire Thomas Ward or another firm.
Read more
Thomas Ward shares their approach to delivering value before selling services.
They created a checklist for prospective clients transitioning services, combining AI-driven analysis with years of experience to help organizations avoid common IT transition mistakes.
They argue that sharing knowledge first is the right way to build business trust.
For brands planning a campaign
This establishes Ward's commitment to client success above pure sales, positioning them as a trusted advisor who prioritizes the client's long-term health and security over a quick contract.
Thomas Ward provides executive-level guidance on CMMC and NIST 800-171, helping organizations build sustainable, documented security programs.
Read more
They advise on handling Controlled Unclassified Information (CUI) and navigating compliance during regulatory shifts.
For brands planning a campaign
Brands requiring CMMC readiness or NIST 800-171 certification can assess Thomas Ward’s ability to manage risk and implement practical, audit-ready security controls.
With over 26 years of experience in enterprise IT, cybersecurity, and executive leadership, Thomas Ward offers fractional CISO, CTO, and CIO services to lead digital transformations and develop large-scale technology strategies.
Read more
For brands planning a campaign
Brands can assess their ability to lead technology roadmaps, manage operational turnarounds, and drive strategic planning across complex organizations.
Thomas Ward brings decades of business and IT leadership to the role of Interim Executive Director for a non-profit organization, managing budgets, operations, and community growth with limited resources.
Read more
For brands planning a campaign
Thomas Ward applies decades of business and IT leadership to mission-driven work and resource optimization.
The posts identify Thomas Ward as Interim Executive Director of the Center for Creative Living and refer to TRW Technology Group as a service provider.
Read more
They do not specify their relationship to the company; ask them to clarify.
Center for Creative Living
Employment
Thomas Ward says they are serving as Interim Executive Director.
Read more
The post describes their day-to-day nonprofit leadership and work with the Center.
Thomas Ward advises executives on technology, CMMC, NIST 800-171, AI governance, and fractional IT leadership.
Read more
Their work focuses on practical risk reduction: preparing for audits without making certification the goal, governing AI before scaling it, and helping clients maintain control during IT transitions.
To explore their work, start with the CMMC pause and AI governance posts, then read the fractional-leadership availability post and MSP transition checklist.
The nonprofit interim-director post shows a different leadership setting and a broader definition of success.
Makrokanis's posts focus on CMMC and defense-supply-chain readiness, including Summit 7's selection for the US Army NCODE program and a supply-chain readiness event for small defense contractors.
Read more
This aligns with Ward's practical CMMC and NIST 800-171 guidance for organizations handling controlled unclassified information.
Makrokanis's material focuses on Summit 7's programs, events, and support for small contractors. Ward's posts offer independent advisory commentary and fractional leadership services.
Edwards's posts address cybersecurity compliance and critical-infrastructure collaboration, including Zayo's founding membership in C2 ISAC and a compliance and government security hiring role spanning CMMC, NIST 800-171, FedRAMP, and related frameworks.
Read more
These themes connect with Ward's focus on compliance and risk management.
Edwards speaks from a telecom and network-operator platform, focusing on sector-wide collective defense and workforce hiring. Ward's posts focus on advisory services and practical program guidance for clients and small organizations.
McLaughlin's posts analyze the CMMC pause and argue for stronger verification and AI training-data provenance.
Read more
This shares Ward's focus on compliance integrity, AI governance, and defense-supply-chain risk.
McLaughlin's posts make data-heavy policy arguments and examine AI supply-chain provenance. Ward's posts offer practical program steps and fractional executive services.
Thomas Ward’s professional content engages audiences focused on technology strategy, enterprise IT leadership and regulatory compliance.
Read more
It addresses decision-makers responsible for CMMC and NIST 800-171 compliance, CUI protection and digital transformation roadmaps. Discussions of AI governance and technology in non-profit operations suggest an audience spanning corporate, government contracting and non-profit executive sectors.
Thomas Ward works primarily in senior advisory and executive leadership roles, providing fractional CISO, CIO, and CTO services to help organizations navigate cybersecurity, compliance, digital transformation, and operational strategy.
Read more
They also bring experience in interim nonprofit executive leadership.
Fractional CISO/CTO Leadership
Buyer requirement
The buyer needs executive leadership in cybersecurity, risk assessment, and technology strategy across large departments.
Compliance and Risk Advisory
Buyer requirement
The buyer needs guidance on CMMC, NIST 800-171, PCI DSS, HIPAA, and other regulations to meet contractual and operational requirements.
AI Governance Strategy
Buyer requirement
The buyer needs help establishing AI governance frameworks that address data protection, acceptable use, and vendor risk.
IT Operational Strategy/Transition
Buyer requirement
Advisory support for IT service changes and digital transformations, with a focus on maintaining data ownership and operational stability.
Nonprofit Executive Management
Buyer requirement
The buyer needs interim executive leadership or operational support for an organization focused on community impact and resource management.
Strong fit for an educational advisory campaign, subject to confirming the scope and any client or vendor conflicts.
Read more
Brief
A cybersecurity or managed IT company wants an experienced advisor to help defense contractors understand CMMC and NIST SP 800-171 readiness while addressing secure AI use.
Campaign use
Invite Ward to lead or contribute to a clearly labeled educational webinar, checklist, or assessment discussion. Ground claims in the material and distinguish their independent advice from the sponsor’s product claims. Ask them to review the proposed content and disclose the commercial relationship.
Why
Ward’s CMMC post says organizations handling Controlled Unclassified Information still have cybersecurity responsibilities despite a pause in the certification timeline. They recommend maturing NIST SP 800-171 controls, identifying gaps, and building policies that work in daily operations rather than focusing only on an audit. In a separate post, they frame AI adoption as a governance issue involving data protection, access, vendor risk, privacy, and security. Those examples support a practical discussion of compliance and AI governance, not a generic product endorsement.
When to choose a specialist
Poor fit based on Ward’s posts reviewed here.
Read more
Brief
A consumer lifestyle brand wants a broad-reach campaign promoting an unrelated product, such as a beverage or travel accessory, through entertainment-led short videos.
Why
The reviewed work is professional LinkedIn commentary on cybersecurity, technology leadership, compliance, managed-service transitions, and nonprofit operations. It does not demonstrate lifestyle or entertainment content, consumer product reviews, or a format suited to that campaign. The available audience evidence describes a professional network, not consumer demographics or reach. Before considering Ward for a consumer endorsement, ask for evidence of audience overlap and relevant content.
A worked campaign example
Campaign angle
“CMMC readiness is more than passing an assessment: keep CUI protected, make controls operational, and prepare for secure AI adoption.”
Execution
A sponsor in cybersecurity services could commission a 30-minute educational session for defense contractors. Ward could explain why organizations should continue improving NIST SP 800-171 practices while requirements evolve, then discuss governance questions organizations should answer before staff enter sensitive data into AI tools. Close with a neutral readiness checklist and an invitation to assess the organization’s own gaps. The sponsor may explain where its services fit, but Ward’s advice should remain distinct from product claims.
Next steps
Ask Ward to confirm that CMMC, NIST SP 800-171, and AI governance are within the engagement scope; agree on the audience, claims, and disclosures; and have a subject-matter reviewer check any regulatory statements before publication. Do not promise certification outcomes or imply that a sponsor’s product alone ensures compliance.
Why this angle fits
The campaign combines two topics Ward addresses directly: sustained CUI protection and practical security controls in their CMMC post, and deliberate AI governance in their AI post. Their MSP-transition post also offers a useful model for the tone: give readers actionable information they can use regardless of which provider they choose.
For a fractional CISO and CMMC brief, Makrokanis is the stronger choice when the campaign needs to reach small and midsize defense contractors through a CMMC service-provider lens.
Read more
The posts center on the Army's NCODE program for small businesses and an AUSA supply-chain readiness event for primes and subcontractors. That makes the material useful for a sponsor selling CMMC implementation or managed compliance to the defense industrial base.
The posts focus on company and event news: an NCODE award announcement and a reception invitation.
They offer less independent advisory commentary and do not address AI governance.
A buyer seeking a named practitioner who explains compliance tradeoffs in their own voice, or can cover both CMMC and AI governance, should ask for examples of that work.
Edwards is the better choice for a campaign aimed at telecommunications, critical infrastructure, or enterprise security leadership rather than small-contractor CMMC advising.
Read more
The posts show a C2 ISAC board role and a Zayo compliance and government security leadership hire spanning CMMC, NIST 800-171, FedRAMP, and related regimes. That fits a campaign aimed at regulated communications or infrastructure buyers.
The content covers board and hiring news from a large communications company.
It demonstrates sector positioning and enterprise program scope, but not hands-on fractional advisory for small defense contractors.
A sponsor seeking practical CMMC readiness guidance or an independent adviser’s voice should ask for examples.
McLaughlin is the better fit when the campaign needs a policy-literate critic on CMMC verification and AI supply-chain risk.
Read more
One post challenges the CMMC pause with assessor-capacity data; another argues for an AI training-data bill of materials and traces state-linked content in model corpora. That suits a sponsor seeking to lead a serious debate on verification, data provenance, and national-security risk.
The writing is argumentative and policy-heavy.
It offers strong material for webinars, explainers, or advocacy, but less direct client-service framing and practical implementation guidance than Thomas Ward’s CMMC and AI governance posts.
A buyer seeking a fractional CISO to guide a contractor through controls and daily operations should ask for examples of that work.
This profile draws on five LinkedIn posts by Thomas Ward about CMMC and NIST 800-171, AI governance, managed-service transitions, consulting, and nonprofit leadership.
The posts’ publication dates are not shown, so they indicate themes in these examples rather than a dated or comprehensive picture of their work.
