Cybersecurity Costs are Allowable: Practical Advice From an Accounting Pro

You’re taking the necessary steps to achieve cybersecurity compliance and banking on the benefits to help you win future work. Which of these costs are allowable, and how will your organization account for and allocate them to your contracts?

Derek Kernus, Director of Cybersecurity Operations at DTS, will help you answer that. In an in-depth conversation with Mike Tomaselli, a cybersecurity pro and accountant with Chess Consulting LLC, we’ll cover:

Today’s landscape for cost accounting regulation
Determining which expenses are allowable
Finding guidance in your contract
Selecting the right method for allocating costs
Controlling two important cost variables: scope and vendor selection
A preview of how cybersecurity will impact all business in the coming years
Audience Q&A

Speaker and Presenter Information

Derek Kernus

Director of Cybersecurity OperationsDTS Consulting

Derek leads a team of cybersecurity engineers, security operations center analysts, and compliance analysts focused on helping the federal government, federal contractors, and private industry to build or remediate their cybersecurity programs to meet compliance requirements. In his role, he seeks growth opportunities in emerging technologies, enhances DTS’ use of technology solutions, and monitors the company’s own compliance. His insights benefit clients needing process improvement, technology transformation, and fractional CIO support. Mr. Kernus has a strong background in IT and Cybersecurity as well as government compliance. Before joining DTS, he was a successful regional manager for several strategic technology firms. Mr. Kernus’ leadership abilities were awarded the William and Mary Cypher Award and he served on the Executive Board for MBAA and the MBA Student Council. He holds a Master of Business Administration from William and Mary’s School of Business, Certified Information Systems Security Professional (CISSP) and Certified Cloud Security Professional (CCSP) certifications from ISC2, and is a Certified CMMC Professional from The Cyber AB.

Mike Tomaselli

IT and Cybersecurity Advisory LeadChess Consulting, LLC

Currently a Director with Chess Consulting, throughout the course of his career he has developed a wide range of skills in areas including regulatory compliance, cybersecurity, financial investigations, and internal audit. He assists clients in the defense, aerospace, professional services, construction, telecommunications and information technology sectors. Mike holds multiple certifications in the areas of information/cyber security and governance as well as internal audit. In his current position, Mike consults with client management and their internal and external legal counsel to assess the impact of regulatory requirements on their operations as well as assist in preparing analyses and reports to support client positions. He collaborates with teams to identify opportunities to improve processes, mitigate risks, and develop solutions to meet a wide range of challenges. Mike has experience in designing engagement approaches, leading teams, and project administration and management. Areas of focus: Government contract accounting and compliance, NIST SP 800-171 and 800-53 cybersecurity requirements, the Cybersecurity Maturity Model Certification, Contractor Business Systems, GSA Schedule contracting, CAS compliance and cost-impact analysis, pricing and estimating, forensic accounting and analysis.