Lee Payton

I run 402InfoSec in Lincoln, Nebraska. If you bring me a security, AI, or technical project, I'm the person doing that work. The practice can also provide coordination and administrative support.

A lot of my experience sits between the systems and the paperwork. I've built security programs, written policies, mapped controls, and gathered evidence for customer and auditor questions. I've reviewed vendors and worked on incident response and recovery planning, too. It's useful to have worked on both sides. When a policy describes an access restriction, for instance, I want to know what the account settings actually allow.

That carries over to the work here. You might need help answering a security questionnaire. You might be preparing for SOC 2, reviewing Microsoft 365, or trying to get a handle on cloud and SaaS risk. We can look at the evidence together and work out where the gaps are. Sometimes that means checking logs or recovery settings. Sometimes it means finding the person who owns a process and getting the documentation caught up.

I also work on AI workflows and websites. Before choosing an AI tool, we need to understand the data it will use and the access it needs. From there, we can plan a small pilot, check the results, and document how to run it. With a website, I start with what someone is trying to do on it. Finding information and getting in touch shouldn't be difficult, and you should know how to manage the site once it's handed over.

The questions I keep coming back to are pretty ordinary. Who owns this? What happens when it breaks? Where would we find the evidence? They can take some digging to answer. Writing the answers down gives the next person somewhere to start.

I'm based in Lincoln and work with small teams in Omaha and across Nebraska as well. Projects can be remote where that makes sense. Email a short description of what you need help with, along with any deadline. The first call is free. Leave passwords and sensitive details out of that first message.