Lawrence Mason
President
Lawrence provides executive direction, delivery governance, and commercial stewardship. He helps ensure every engagement remains aligned to the client’s decision, scope, business context, and intended outcome.
About Nerthus
Independent judgment for regulated systems.
Nerthus Consulting helps leaders resolve consequential security, architecture, and evidence questions without adding a layer of generic consulting overhead.
Why Nerthus
Trace the full control chain.
Regulated-system problems rarely stay inside one control statement. They cross architecture, identity, operations, contracts, policy, vendor responsibility, and executive risk. Nerthus traces that full chain and converts it into a decision and a practical path forward.
Engagements are principal-led and senior-delivered so context stays close to the work and leadership receives a clear view of assumptions, tradeoffs, dependencies, and next actions.
Leadership
Accountability stays close to the work.
Nerthus engagements connect executive direction and commercial stewardship to hands-on regulated-systems analysis and delivery.
H. Barbara Grofe
Chief Technical Officer
Barbara leads Nerthus’s regulated-systems work. She brings more than two decades of security and enterprise architecture experience spanning public benefits, healthcare, cloud and SaaS environments, NIST-based programs, IRS and SSA safeguards, vulnerability management, identity and access management, and vendor oversight.
Every Nerthus regulated-systems engagement is led by Barbara.
Selected credentials
CISSP-ISSAPCISSP-ISSEPCISSP-ISSMPHCISPPCSSLPCISMCGEITGICSP
Working principles
Clear, bounded, and usable after the engagement.
- 01
Start with the decision and the evidence standard.
- 02
Trace the control across technology, operations, and accountability.
- 03
Make assumptions and boundaries explicit.
- 04
Create artifacts the client can operate after the engagement.
- 05
Say what the work does not establish.
Work directly with senior leadership
Bring the issue that needs clear ownership and forward motion.
A confidential fit call will determine whether Nerthus is the right resource and what can be resolved in a bounded engagement.