Consulting Capabilities

Mike Gray, CISSP

I am a healthcare technology executive with over 18 years of industry experience, from IT support to Vice President and Chief Information Officer. I help leadership teams make technology decisions that hold up in the boardroom, in an audit and in the server room. Cybersecurity is central to my work: as a CISSP, I build and run security programs in a regulated, multi-site healthcare environment.

Mike Gray

What I can help with

  • Security program building and risk assessment
  • Penetration testing, or help finding and managing qualified testing resources
  • Security architecture review
  • Incident response planning and tabletop exercises
  • Security awareness and phishing readiness programs for staff
  • IT strategy and practical roadmaps for small and mid-sized organizations
  • Technology budgeting and budget planning, including compliance-driven spend
  • Business cases and vendor decisions that hold up to executive scrutiny
  • Support operations redesign, including remote-first resolution models
  • Patching cadence and steady day-to-day operations across multiple sites
  • Small to medium-sized network design and network security
  • Microsoft 365 and SharePoint
  • Active Directory and Group Policy
  • RMM tools: setting them up and protecting the environment around them
  • Entra identity, Conditional Access and MFA
  • Endpoint management
  • HIPAA-aligned technology and risk management
  • Audit readiness and remediation planning
  • Compliance program leadership for senior care, skilled nursing, home care and hospice
  • Policy and procedure development
  • AI usage policy and governance frameworks
  • Technical guardrails for AI tools in regulated environments
  • Practical AI adoption for everyday staff workflows
  • EHR and clinical system selection and migration
  • HRIS, scheduling, learning management, inventory, and time and attendance systems
  • Rollout planning and staff training for new systems
  • Power Automate workflow design and automation
  • Custom internal tools and utilities for frontline staff
  • SMS, voice and alerting tooling, including Twilio
  • Identity and account lifecycle automation in Microsoft 365 and Entra
  • IT integration for acquisitions and new facilities
  • Technology oversight for joint ventures
  • Pre-acquisition IT due diligence
  • Plain-language briefings on cybersecurity strategy and risk for executives and boards
  • Committee-ready reporting for quality assurance and audit committees
  • Fractional or virtual CIO leadership for organizations without a senior IT leader
  • One-off or recurring presentations on IT, cybersecurity and technology compliance
  • Workshops from small sessions to full-day formats
  • Training for users and employees at every level, from frontline staff to board members

Speaking, credentials and education

My speaking history, certifications and education live on my contact page: mikegray.contact