About
SMC GRC.ai is the emerging-technology risk practice of Security Medic Consulting, based in the Hudson Valley and serving organizations across New York State: small and mid-sized businesses, healthcare, financial services, and state and local government.
It works alongside the other SMC practices: governance from Hudson Valley CISO, security architecture and assessment from CyberIntelPro, and privacy from Privacy Medic.
The practice is led by Jim Venuto. Before founding SMC, Jim spent his career leading security, privacy, governance and CISO-level work for mid-size and large enterprises and for state and local government bodies, including AI governance and emerging-technology risk. SMC brings that experience to organizations that cannot justify a full-time executive.
We are vendor-neutral. We lead and advise; your team, your provider or our partners implement, and we tell them exactly what is needed.
What we do today
- Fractional CISO and vCISO leadership across security, privacy and governance
- AI governance, inventory and vendor risk on the NIST AI Risk Management Framework
- Post-quantum readiness planning against the NIST standards and federal guidance
- Assessments run on our own platform: plain questions, a written gap report, evidence you keep
- Regulated and public-sector frameworks: HIPAA, NYDFS Part 500, NY water-sector rules, CJIS, NY Education Law 2-d
The SMC family
- Security Medic · Umbrella consultancy
- Hudson Valley CISO · NIST CSF 2.0 Govern leadership
- CyberIntelPro · CSF Identify to Recover leadership
- Privacy Medic · NIST Privacy Framework leadership
Start with the free assessment
Free 30-minute call, free assessment, gap report and free results review. No obligation. Or write to support@securitymedic.com.
Book a free 30-minute call