Mike Capela
Mike Capela
IT Security & AI Governance Consultant | CISSP
20+ years in IT security and infrastructure across regulated financial services (Wells Fargo), defense (DoD, Secret clearance), and managed services. Career built on both sides of the vendor-assessment table — the side that evaluates risk and the side that gets evaluated.
Now focused on AI governance: AI vendor risk assessment, NIST AI Risk Management Framework, and building AI-assisted compliance workflows that encode practitioner judgment into repeatable, scalable tools.
Available for consulting engagements, expert calls, and speaking.
Published Work
I Was the Vendor Your Questionnaire Was Trying to Catch — What happens when you use AI to assess an AI company's risk, and then document every mistake the AI makes. (Substack)
AI Vendor Risk Assessment: Anthropic — A Claude-assisted vendor risk assessment mapped to the NIST AI Risk Management Framework, with a documented error analysis. Includes a reusable questionnaire template. (GitHub)
Connect
Credentials
CISSP — (ISC)², endorsed in Risk Management and Vulnerability Management
Azure Security Engineer Associate · Azure AI Fundamentals (AI-900)
B.S. Business Administration · U.S. Army Veteran