PEOPLE • PROCESS • TECHNOLOGY • COMPLIANCE

Build Trust.
Strengthen Security.

Practical cybersecurity and infrastructure expertise built on decades of real-world experience.

BOB-0 brings together complementary expertise in cybersecurity, enterprise infrastructure, cloud technologies, networking, identity, compliance and IT operations.

Central Florida • San Diego Metro • Remote Nationwide

Tell us what you're trying to accomplish
bob-0.com — Build Trust. Strengthen Security.

OUR APPROACH

Security starts with understanding the environment.

Cybersecurity isn't simply a collection of products. Effective security requires understanding how people work, how systems interact, what information must be protected, what requirements apply and where real-world risks exist.

Cybersecurity & Risk

Security architecture • Vulnerability management • Security monitoring • Risk assessment • Incident response planning • Security policies and procedures

Infrastructure & Networking

Enterprise networks • Windows infrastructure • VPN • Cisco • Meraki • VMware • Network segmentation • Systems administration

Cloud & Identity

Microsoft Azure • AWS • Microsoft 365 • Intune • Okta • MFA • Cloud migration • Identity and access management • Terraform

Governance & Compliance

PCI DSS • Security governance • Policy development • Documentation • Compliance readiness • Business continuity • Disaster recovery

PCI DSS

Protect payment data. Reduce risk. Build trust.

PCI DSS compliance should be more than passing a vulnerability scan or completing an annual questionnaire. Organizations need to understand where payment-card data exists, which systems are in scope, how those systems are segmented and protected, who is responsible for them, and whether documented controls reflect the actual environment.

  • Cardholder Data Environment (CDE) identification
  • PCI DSS scope analysis and reduction
  • Network segmentation
  • Internal and external vulnerability scanning
  • Vulnerability remediation
  • Security policies and procedures
  • Logging and monitoring
  • Security awareness requirements
  • SAQ and AOC preparation support
  • Documentation, evidence and accountability planning
The objective isn't simply to check a compliance box. It is to create an environment worthy of the trust customers place in it.

OUR PRINCIPALS

Decades of experience. Complementary perspectives.

BOB-0 is led by Robert Garland and Ryan Garland. Robert's background centers on cybersecurity, compliance, networking, governance and risk. Ryan's centers on systems engineering, cloud infrastructure, identity, automation and enterprise operations.

Together, we look at both sides of the equation: how is the environment built and operated—and how is it secured, governed and trusted?

Robert Garland, CISSP

Principal — Cybersecurity, Compliance & Infrastructure

Robert brings decades of technology and business experience spanning cybersecurity leadership, enterprise networking, infrastructure modernization, security governance, vulnerability management, PCI DSS and business operations.

His experience includes enterprise network transformations, cybersecurity monitoring, vulnerability assessment, security policy development, PCI DSS initiatives, business continuity and disaster recovery planning, and security architecture. Technologies include Tenable Nessus, OpenVAS/Greenbone, Wazuh, Cisco networking and firewalls, VPN, segmentation, logging and monitoring platforms.

CISSP • B.S. Accounting • Six Sigma Green Belt
Central Florida

Ryan Garland

Principal — Systems, Cloud & Infrastructure

Ryan brings more than 20 years of IT experience across systems engineering, cloud migration, identity management, enterprise infrastructure, networking, IT management and technical operations.

His experience includes Microsoft 365, Intune, Okta, AWS, Azure, VMware, Cisco Meraki, Terraform, GitHub, VPN and MFA technologies. Ryan has led migrations from on-premises infrastructure to Azure and AWS, built cloud infrastructure, integrated identity and MFA solutions, deployed enterprise networks and supported software-development and scientific-computing environments.

MCPS • MCSE • MCSA
San Diego Metro

EXPERIENCE BEFORE PRODUCTS

Start with the problem.

We don't begin a conversation by selling a particular firewall, cloud service, security platform or subscription. We begin by understanding what you're trying to accomplish, what matters most, what could go wrong, what requirements apply and what you already have.

What are you trying to accomplish?What information and systems matter most?What could go wrong?What can realistically be improved?

The right solution isn't necessarily another product.

LET'S TALK

Have a technology, security or compliance challenge?

You don't need to know which product you need. You don't even need to know exactly what the problem is.

Tell us what you're trying to accomplish. We'll start there.

Central Florida • San Diego Metro • Remote Nationwide