** Aspiring Supply chain and third-party risk, automated.** Open to full-time roles and fractional engagements.

I map who a business depends on, find the single points of failure hiding a tier or two down, and build tools and AI agent workflows that make that work repeatable, with a person checking every step.

Portfolio site: starboy1968.github.io

Start here

• two-suppliers-one-factory: a case study on finding a hidden tier-2 single point of failure, with a concept map and concept notes
• supply-web-audit: an 8-stage supply risk audit that people or AI agents can follow, with a human sign-off at each stage
• grc-control-mapper: a Python tool that maps policy text to NIST 800-53 controls, including the supplier controls SR-2 and SA-9, with 64 tests
• va-incident-mapper: an incident documentation tool with a tamper-evident evidence log and 51 tests

More projects

• ai-supply-chain-risk-assessment: nine scored AI-related supply chain risks, with controls, warning indicators (KRIs) and a 30/60/90-day plan
• ai-assisted-risk-analysis: a reusable risk-analysis prompt and a worked example where an AI first draft is checked and corrected by a human reviewer
• power-behavior-risk-indicators: observable signs of how power, incentives and group behavior shape risk decisions, and how to turn them into solid findings
• behavioral-supply-chain-risk-audit-ai: how bias and pressure create supply chain risk, and how AI triage, audit evidence and human review help catch it
• supply-chain-ai-governance-strategy: plain-language game theory that explains why supply chain and AI risks persist, and which incentives to change
• ai-in-supply-chain-operations: how a supply chain manager can use AI in six everyday jobs, and what to check before trusting it
• healthcare-cyber-risk-osint-case-study: a cyber risk program for a fictional regional health system, built only from public sources
• ai-for-it-auditors: nine practical ways AI can speed up IT audit work, from walkthroughs and SOC 2 review to auditing AI, with a human check at every step
• localized-small-supply-chain: plain-language AI prompts and workflows for small local businesses, covering suppliers, ordering, forecasting, overstock and dead stock, vendor lead times, and supply risk
• engineering-prompts: 23 model-agnostic AI prompts for software and ICS/OT engineers, each with human gates at the start, middle and end

Writing

• AI Risk Lives in the Permissions: an executive memo on unapproved AI tools as unvetted vendors, with a 30/60/90-day plan (all sources checked)

Background: CompTIA Security+, B.A.S. from George Mason University, IT service desk support for the Army, and years running restaurant kitchens, where a missing delivery means you're out of the dish tonight.

Contact: shawnboi74@gmail.com