Security and technology leadership without the full‑time hire.
Fractional & interim CISO / CTO / AI solutions / Security & AI diligence
Senior leadership for firms that hold sensitive data, answer to clients, insurers and regulators, and can't yet justify a full-time security executive.
Built for firms where trust is the product.
Law firms and professional services
Client security questionnaires, outside counsel guidelines, wire-fraud risk, and staff already using AI tools without a policy.
Growing small and midsize businesses
Insurance renewals that ask harder questions every year, and a security program that has grown up by accident.
Owners and investors in a transaction
Sellers who want to find issues before a buyer does, and acquirers who need to know what they are buying.
What Trillium Foundry does
Each service is sized for firms that need senior security judgment without adding a full-time executive.
-
Fractional and interim CISO / CTO
Ongoing security and technology leadership a few days a month. I own the roadmap, policies, vendor oversight, insurance applications and reporting to your partners or board, and I'm the first call when something goes wrong.When you face client, insurer or regulator scrutiny, or between permanent hires.
-
Security program assessment
A fixed-fee, four-week review of your controls, policies, insurance posture, vendors and incident readiness. You get a prioritized 12-month roadmap with costs, written for the people who approve the budget.When a renewal, a client questionnaire or a near miss forces the question.
-
Incident readiness and response
A written response plan, a tabletop exercise with your leadership, and a retainer so there is an experienced investigator on call. I coordinate with your insurer, breach counsel and IT provider.Before you need it, which is the only time it is inexpensive.
-
Cyber insurance readiness
I complete or review your cyber insurance application and close the gaps insurers ask about: multi-factor authentication, endpoint protection, backups, email security and administrator access. Every answer is backed by evidence, because an inaccurate application can put a claim at risk.When a renewal is coming, premiums are climbing, or the questionnaire has questions you can't confidently answer.
-
AI governance and practical adoption
An acceptable-use policy, tool vetting, data-handling rules and staff guidance, so your people can use AI safely. For firms building with AI, secure development and model oversight too.When staff are already using AI and nobody has written down the rules.
-
Security and AI diligence
Sell-side readiness that finds and fixes what a buyer's diligence team will find. Buy-side assessment of a target's security, breach exposure and AI use, framed in deal terms.Before a sale, an acquisition, or an investment decision.
Also available: answering client security questionnaires, and security awareness and wire-fraud training.
About Keith Swiat
Keith formed Trillium Foundry in 2026 after roughly 35 years in cybersecurity, much of it in large consulting firms leading breach investigations, security diligence and interim security leadership.
He works with owners, managing partners and boards the way a senior advisor does: explaining security in cost, operational and risk terms, and turning it into a plan they can fund. Behind that is hands-on experience running security programs as an interim CISO, building them from scratch, and leading incident response when things go wrong.
Trillium Foundry is based in Saunderstown, Rhode Island.
- 30 Yearsin cybersecurity, from hands-on forensics to executive leadership
- 400+security diligence engagements, buy-side and sell-side
- 1 Principalon every engagement, with no hand-off to a junior team
Start with a conversation.
Tell me what prompted the call: a renewal, a questionnaire, a deal, an incident, or just a sense that security has outgrown the way it's handled today.
- keith@trilliumfoundry.com
- 401.386.5588
- linkedin.com/in/keithswiat
- Saunderstown, Rhode Island