Steven Bates, C/CISO, CISM, CISSP, CISA, HCISPP

Founder & Principal Advisor

Mr. Bates has served most recently as the Director of Information Security and HIPAA Security Officer for Upstream Rehabilitation. Previously, Steven was Director of Information Security at Drayer Physical Therapy and was responsible for developing and managing the Information Security Program. After being acquired by Upstream, Steven continued the development of Upstream’s information security strategy and operations, including building a highly effective team of skilled security practitioners. Steven previously held various IT and security positions within Rite Aid Corporation, IBM, and Eckerd Drug company.
Steven is a member of ISC2 and ISACA organizations, and the holds information security certifications including Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Healthcare Information Security and Privacy Practitioner (HCISSP), and Certified Data Privacy and Solutions Engineer (CDPSE). Steven is a lifelong learner who loves to spend time with his family and travel.

Services

- Information Security Program Design and Development
- Security Assessments and Gap Analysis
- Framework Compliance and Assessment