Paul Curylo is VP and CISO at Inova Health System. Curylo is an information security professional versed in HIPAA/HITECH, especially risk analysis and working with auditors and government investigators. He works with system owners to achieve compliance on both projects and infrastructure remediation. Curylo also handles technical design and implementation reviews of full information systems. He finds creative ways to define compensating and mitigating controls that achieve tolerable risk for any one system or for an entire organization without sacrificing CIA confidentiality, integrity, and availability. His specialties include system assessment, security controls, policy and technical writing, and information assurance.