About KRAA Security
Complete Solutions for Cyber Security Protection For You Business
KRAA Security Integrates All Personal Security Service Offerings Into One Easy to Manage Portal
Kraa Security’s team is comprised of industry leaders in network, application, database and communication security. Our over 50 years of combined experience spans the spectrum from electronic to database security, with the full technology stack in between. We are driven to ensure your most precious data is secure from outside threats, nefarious insiders, and any of a myriad of other damaging actors attempting to undermine your business. Our team is here for one goal, your business’s security.
Executive Staff
Erik Tomasi
Managing Director, Razient
Erik Tomasi is a Managing Director for Razient, a security consulting firm, based in Miami. He leads the firms consulting division, partner relations, and manages client relationships across several industry sectors. Mr. Tomasi is considered an expert in information security, risk management, and technology management.
Mr. Tomasi has twenty-five years’ experience as a Technology leader, Information and Cyber Security planning expert, and leads the firm’s Information Security practice. He has consulted for numerous companies in the areas of strategic IT management, information security best practices, and security compliance. He has led multiple security engagements related to PII, SOX, HIPAA, SCADA, ISO 27001, SANS 20, NYC Part 500, and governance. Mr. Tomasi was the Americas CIO at Hermes of Paris. He has also executed technical consulting or CISO roles at Sony Music Entertainment, Northwell Health, Mellon Foundation, Easter Generation, Bank Leumi, New Jersey Transit, PWC, and IBM. He has experience in several sectors including finance, insurance, media, healthcare, education, retail, and advertising.
Mr. Tomasi has extensive financial services and insurance experience. As CIO of White Mountains Re, he oversaw all technology for the $2B global reinsurer, including building a state of the art disaster recovery plan, and meeting all audits and compliance mandates. At Ironshore Services, as VP he focused on managing the deployment of several industry applications and security initiatives for this emerging multiline insurer. At Chase, he lead the deployment of the bank’s first two factor authentication system which was deployed to over fifteen thousand users. He has also consulted for multiple organizations including Sony Music Entertainment, Bank Leumi, Northwell, Sun Bank, and EquiLend a consortium of the leading investment banks.
Mr. Tomasi has spoken at numerous industry events, been featured in webinars, and contributed to several magazine articles. He is an InfoSec and PCI compliance expert who is a Certified Chief Information Security Officer (C | CISO), Certified Information Systems Security Professional (CISSP), and ISO 27001 Certified Lead Auditor. He is also President and Board Member of the Society for Information Management’s (SIM) New York Metro Chapter. Mr. Tomasi has taught Information Security courses at the University of Louisiana at Monroe, for ISACA (Information Systems Audit and Control Association), and as an Adjunct Professor at Baruch College.
Mr. Tomasi holds a MBA in Finance from New York University’s Stern School of Business and BS in Electrical Engineering from New York University’s Polytechnic School of Engineering.
Kartik Trivedi
Managing Principle
Senior information security leader with 17+ years of experience helping numerous entities including Fortune 500, non-profit, tech start-up, financial services, and healthcare organizations meet their security, privacy, and business needs by helping to define strategic goals, develop road maps for more functional, mature, and secure programs, address immediate issues, and drive implementation of practical security solutions.
Prior Roles
Partner at Razient, Co-Founder and Partner at Symosis, Director at Accuvant / Optiv, Managing Principal at McAfee, Principal at Foundstone
Relevant Expertise
Security Program Strategy
Security consulting and advisory for 18+ years worked with 100+ Fortune 500 companies, SMB and non-profits on security program development, enterprise risk and cybersecurity in M&A
Enterprise Risk and Compliance
Risk and Risk management, Compliance - ISO, FedRamp, NIST, PCI, HIPAA, Third Party Risk
Threat & Vulnerability Assessment
Security Assessments, Penetration Testing, Application, Mobile and Cloud Security
Security Architecture & Implementation
Security Requirements, Threat Modeling, Enterprise Architecture, Data security
Security Education
Previously SANS / Global Knowledge Instructor, Security Awareness Training, Security Training for Developers
Author & Contributor
Hardening Code: Bulletproof Your System Before You Are Hacked
Hacking Exposed: Web Applications
Exploiting Software
How to Break Web Security
Speaking
RSA Security Conference
Security World Expo
OWASP Leadership Conference
Local ISACA, ISSA conferences
Certification: CISSP, CISA, CISM, C-CISO, ISO 27k certified professional
Board Member: ISACA Silicon Valley, Previously OWASP
David Dietrich
Managing Principle
David Dietrich is a veteran software manager and avid software engineer. His successful background includes managing 9-figure revenue projects for Ports of Long Beach and Los Angeles as the Chief Systems Architect for both the Clean Truck Fee and the Traffic Mitigation Fee programs. He holds an MBA in Marketing while bringing over 25 years of experience in all phases of product lifecycle management. From product creation, to development, to implementation, profitable product management is always at the forefront of David’s philosophy. His leadership in industry is recognized on the value proposition that quality products + superior customer service = prized customers and profitable business.
His modern career started on America’s railroads. He began with Safetran Corporation, the world leader in manufacturing railroad crossing and communications equipment. As part of the communications engineering team, he spearheaded a leading role in Total Quality Management (TQM) integration between the engineering and manufacturing teams. He was solely responsible for organizing, creating and implementing the ISO 9001 software certification for the entire company. His greatest contribution was pioneering the Design for Manufacturing concepts that helped ensure all manufacturing remained profitably on shore.
From 1996 through 2000 and again from 2003-2008, David served as Director of Engineering at AQUA Software, a technology systems provider for the travel industry. While at AQUA, he envisioned, built and released 45 products targeted to travel companies whose revenue grossed $50 million + per year. These products are still operating today, interfacing to the world’s five largest commercial databases providing value and lower costs to travelers globally.
Venturing on his own in early 2000, David successfully launched Pernova, a software company focused on providing best-in-class travel operations support systems. Concurrently, David was an adjunct professor at his alma mater, where he taught graduate courses on Internet E-Commerce. He successfully harvested Pernova in 2001 through a sale to CNG Hotels, an Irish multinational firm.
David then served as Chief Technology Officer at HXXD, a Beijing based, Chinese multinational firm focused on homeland security. At HXXD, David pioneered the design, manufacture and implementation of SkyEyes, a facial recognition tool aimed at finding criminals, terrorists, and other persons of interest from real-time video feeds. SkyEyes is actively used daily by Beijing Capitol Airport, transportation centers throughout China, and at strategic Chinese border checkpoints. As a continued testament to David’s international acumen, he is fluent in the culture and language of Mandarin Chinese.
When not blueprinting new visions, David is actively involved in civic endeavors. David is a trained emergency radio operator and former first responder with the Newport Beach Fire Department. He is also an active member of the Community Emergency Response Team (CERT) where he served as its first Chief Radio Officer and is a proud servant to his local community.
X
Erik Tomasi
Kartik Trivedi
David Dietrich
