Posts

Showing posts from September, 2026

Mike Capela

  Mike Capela IT Security & AI Governance Consultant | CISSP 20+ years in IT security and infrastructure across regulated financial services (Wells Fargo), defense (DoD, Secret clearance), and managed services. Career built on both sides of the vendor-assessment table — the side that evaluates risk and the side that gets evaluated. Now focused on AI governance: AI vendor risk assessment, NIST AI Risk Management Framework, and building AI-assisted compliance workflows that encode practitioner judgment into repeatable, scalable tools. Available for consulting engagements, expert calls, and speaking. Published Work I Was the Vendor Your Questionnaire Was Trying to Catch — What happens when you use AI to assess an AI company's risk, and then document every mistake the AI makes. (Substack) AI Vendor Risk Assessment: Anthropic — A Claude-assisted vendor risk assessment mapped to the NIST AI Risk Management Framework, with a documented error analysis. Includes a reusable que...