Fractional CISO · Fractional CTO · Identity Security
Executive-level security and technology leadership for organizations that need senior judgment, not another full-time hire. Fractional CISO and CTO engagements, focused assessments, and hands-on identity security, led by Filip Pantovich: 28+ years in enterprise infrastructure and security, including nearly 21 in the U.S. Air Force.
Most organizations don't need a full-time CISO or CTO. They do need someone senior who can own the problem, set priorities, and make sure the work actually gets done.
There's no clear owner, no roadmap, and no straight answer when leadership asks "how exposed are we?"
Security questionnaires, cyber-insurance renewals, PCI DSS, or CMMC requirements that need credible answers and evidence.
Accounts pile up, privileged access sprawls, and MFA is inconsistent. Stolen credentials remain one of the most common ways attackers get in.
Technical debt, undocumented systems, and knowledge that lives in one person's head.
Teams are already using AI tools. The question is whether that's safe, governed, and actually productive.
Overlapping licenses and platforms that cost more than the value they deliver.
Each engagement pairs leadership-level judgment with the technical ability to carry the work forward, alongside your existing team, IT staff, or managed service provider.
Ongoing ownership of your security program, so leadership knows what matters, what it costs, and what's being done about it.
PROOFAuthored Air Force-wide security policy that informed updates to the Defense Department's DISA STIG hardening standards.
Clear technical direction for modernization, architecture, and spending decisions, tied to business priorities rather than vendor pitches.
PROOFDirected the Air Force's global storage and virtualization enterprise: 300+ staff supporting a 900,000-user network.
Harden the systems that decide who gets in and what they can touch, where most modern breaches begin.
PROOFSecures 40,000+ managed identities in his current enterprise role, and drove consolidation from nine Active Directory domains to six.
Get ready for the frameworks your customers, insurers, and contracts require, grounded in what assessors actually check.
PROOF21+ years of hands-on hardening and continuous compliance oversight in Defense Department environments.
Move fragile, manual systems toward automated, documented, version-controlled platforms that survive a team change.
PROOFDelivered an $8.5M infrastructure modernization across 500+ virtual servers while holding 99.9% uptime.
Put AI to work on real engineering, with guardrails, human review, and workflows your team can maintain.
PROOFFormally trains his current engineering team on AI-assisted development, and helped build the Air Force's storage and virtualization training baseline for 31,000 cyber personnel.
Every engagement begins with an agreed scope, deliverables, and working rhythm. No open-ended retainers you can't measure.
An independent review of a defined area, with a plan you can act on.
Best for: a specific concern, an upcoming audit, or "where do we even start?"
Discuss an assessment →A recurring CISO or CTO role with defined responsibilities and accountability.
Best for: organizations that need a senior owner, part-time.
Discuss fractional leadership →Hands-on design, implementation support, or training with clear milestones.
Best for: an MFA rollout, identity cleanup, modernization, or AI adoption.
Discuss a project →Fees, schedule, access requirements, and confidentiality terms are agreed in writing before any work begins.
Selected outcomes from Filip's Air Force and enterprise career, the experience every engagement draws on.
Infrastructure retrofit across 500+ virtual servers, adding a petabyte of storage, at 99.9% uptime.
U.S. Air Force · globalDrove Active Directory consolidation from nine domains to six, reducing complexity and exposure.
Current enterprise roleAuthored security policy adopted Air Force-wide and used to inform updates to DISA STIG standards.
U.S. Air Force · enterpriseHand-selected to build the Air Force's storage and virtualization training curriculum, aligned across 11 career fields.
U.S. Air Force · career fieldMan-hours saved annually by automating system-access account creation while deployed.
Operation Enduring FreedomContracts managed as a resource advisor, with funds redirected to critical requirements.
U.S. Air Force · squadron/groupNearly 21 years inside Defense Department and joint environments, including systems supporting the Joint Staff, means Faithful Oversight understands both the requirements and how they play out on real networks.
Faithful Oversight provides readiness and advisory support. It is not a certified third-party assessor (C3PAO) or PCI QSA, and can help you prepare to work with one.
Organizations trusted with critical systems deserve leadership that has actually built, secured, and operated them.
Filip's career started in 1998 as a federal civilian IT hire while he was still in school. It continued through nearly 21 years in the U.S. Air Force, including joint assignments and serving as the Air Force's global functional lead for Storage & Virtualization.
Today he architects enterprise identity and access management for a global live-entertainment company, securing more than 40,000 managed identities across six Active Directory domains. That keeps his technical depth current, not historical.
Across every role, the same habits carry through: automate the repetitive, document what matters, favor open-source and maintainable tooling over expensive licensing where it fits, and invest in the people around him. You get clear decisions, practical results, and knowledge that stays with your organization.
Oversight is a trust. The name reflects a simple standard: treat a client's systems, data, and budget with the same care as our own.
A no-cost call to understand what's happening, what you want to improve, and your constraints, and to make sure it's a good fit.
Priorities, deliverables, responsibilities, fees, and schedule agreed in writing, including how the work fits with your team and providers.
Progress against milestones, documented decisions, and knowledge transfer, so the results keep working after the engagement ends.
Not necessarily. Many clients start with a focused assessment or a single project and decide from there. The scope should match the problem.
Yes, and that's often the best setup. Faithful Oversight provides senior direction, architecture, and specialist depth, while your team or provider keeps day-to-day operations. Responsibilities are defined up front.
Yes, with readiness: gap analysis against NIST SP 800-171, remediation planning, and preparing evidence. Faithful Oversight is not a certified assessor (C3PAO) and does not perform formal certification assessments.
An NDA is standard. Access follows least privilege and is granted only for agreed work. Please never send passwords, keys, or sensitive system details through this website or by email.
Primarily remote, nationwide. Faithful Oversight is based in the St. Louis metro area (Trenton, Illinois), and on-site work can be arranged when the engagement calls for it.
Faithful Oversight takes on a limited number of part-time and project-based engagements at a time, so each one gets real attention. Meeting cadence and response expectations are set in the scope.
Share the challenge, the outcome you want, and your timing. Every inquiry gets a personal reply from Filip.