Who We Are

Martin B. Pohlman

Martin has extensive expertise in data privacy, sourcing and vendor management, and digital transformation. Prior to founding Visdom, Mr. Pohlman held roles as a Lead ISO 13485 Auditor and Managed Detection and Response (MDR) technical architect. He worked with companies hosting hybrid medical applications, using several public cloud platforms, including Microsoft Azure, Google Compute and Amazon Web Services. Many of his clients are leaders in CRISPr Biotechnology and Genomics design. Mr. Pohlman has also worked with the United States Department of Veterans Affairs.

In the last decade, Mr. Pohlman has advised companies and driven multiple initiatives to ensure compliance with the EU General Data Protection Regulation (GDPR). He also acted as Cloud Security Alliance liaison to ENISA and was a member of the NIST FedRAMP Steering Committee. Mr. Pohlman delivered guest lectures at Yonsei University, South Korea on topics of privacy, Cloud Security, and sourcing.

Mr. Pohlman is co-editor with Satoru Yamasaki of ISO/IEC 27017 -- Information technology -- Security techniques – Guidelines on information security controls for the use of cloud computing services based on ISO/IEC 27002

Mr. Pohlman authored three books:

- LDAP Metadirectory Provisioning Methodology: A step by step method to implementing LDAP based meta-directory provisioning

- Oracle Identity Management: Governance, Risk, and Compliance Architecture, Third Edition

- Oracle Identity Management: Governance, Risk and Compliance: Implementing Multinational Regulatory Compliance

An engineer and MBA through qualifications, Mr. Pohlman is a Certified ISO 9001 Quality, 27001 Security & 13485 Medical Device Lead Auditor (Dual recognition: Exemplar Global & PECB) Certified Information Systems Security Professional (CISSP-ISC2), a Certified Information Security Manager (CISM-ISACA), Certified Information Systems Auditor (CISA-ISACA) and Certified Cloud Security Auditor (CSK-CSA).

Robert F. Wells

Robert is an adaptive technologist, business leader and entrepreneur with a career spanning over three decades in security risk management, IT assurance and compliance. He worked with greater than 40 corporations, across a wide range of industries to operationalize the requirements of compliance frameworks.

Mr. Wells excels at understanding an organization’s business directives, applying technology against those directives, and improving the effectiveness and efficiency of business processes and risk management functions. He truly enjoys projects with a high degree of risk and complexity having delivered solutions to organizations on a large scale well above 10,000 man hours.

Matthew G. Marsh

Mr. Marsh is a member of the Iowa bar and an expert in IT management, cybersecurity, and cyber law. He holds NSA, CISA, CISSP security certifications, and focuses on SNMPV3 and multiprotocol security layers within IPv4 and IPv6.

Mr. Marsh authored the book “Policy Routing Using Linux” [ISBN 0-672-32052-5]. He is a frequent speaker on security and legal accountability, and delivered presentations to many organizations, and at computer conferences, including COMDEX and DEFCON

Our 5 Step Process

Visdom Key Principles

Our approach to ISO certification is based on a set of key principles:

Fixed Fees: We operate a fixed fee structure. ISO implementation is priced at a fixed rate from day one. No hidden charges, no unexpected invoices.

We are Flexible: The flexible nature of our ISO implementation is designed to fit around your business requirement and schedule.

Assigned Assessor: Visdom guarantees that the highly qualified and trained Assessor assigned to work with your business will be the same through-out the process in order to sustain continuity.

ISO Framework: Implementation of the ISO framework is based on your organization's existing systems. We simply look to improve the systems currently operating.

Full Implementation: We provide full implementation and aim to ensure that your journey to ISO certification is trouble free.

Standards We Support

We audit and assess the following standards on a fixed fee basis