Trusted Advisors

Andrew Brooker - Co-Founder/Principal

Andrew Brooker co-founded Octellient to be a side-by-side partner with clients, working together to navigate a tailored information security strategy.

Andrew has over 20 years of professional consulting and corporate experience in Information Security, Operations, Engineering and Support, working with small to large global organizations.  Andrew believes that business culture is the foundation of managing risk effectively.  He has worked with clients to create and enforce information security programs, policies, standards, and procedures with concentrations in Health Insurance Portability and Accountability Act (HIPAA), Federal Financial Institution Examination Council (FFIEC), Graham-Leach Bliley Act (GLBA) and Payment Card Industry (PCI) and System and Organization Controls (SOC) compliance.  Andrew has delivered, Enterprise Risk Assessments built around NIST 800-30, Business Impact Analysis built around FFIEC and DRI, Security Testing built around PTES and NIST 800-115, and Gap Assessments, IT Audits, Compliance Audits against various standards and regulatory requirements.  He is an experienced Incident Response Handler and Disaster Recovery Coordinator. 

When Andrew isn’t busy advising clients in the areas of Risk Management, Team and Culture, 3rd Party Risk, Continuity and Recovery, Governance Development, SOC Readiness, PCI-DSS Compliance and IT Audit, he can be found in the gym or in the kitchen working on a food related project or learning classic cooking methods.

Chris Cathers - Co-Founder/CEO

Chris Cathers co-founded Octellient with a vision of simplifying information security with a goal of bringing a business first approach to help organizations get to their core priorities and make the most of their information security investments. 

Before starting Octellient, he spent more than 15 years working with small manufacturers, community banks as well as Fortune 100 companies to manage their risk by effectively aligning their People, Process and Technology.  Chris’s background includes consulting, along with time at RSA and with Swimlane a Security Orchestration and Reporting (SOAR) platform. He believes every organization has something worth protecting, how and to what extent, should be driven by the business.  Businesses can strengthen their security posture by moving the conversation up the priority ladder and integrating it into the culture of the organization.  After all, everyone is in security.

When Chris isn’t busy advising clients in the areas of Risk Management, Team and Culture, Resilience, Governance and Compliance, he can be found in the gym or seeking out interesting backroads to explore on his Harley-Davidson.