Gary Nelson is a Principal at Schellman Compliance for the Southeast region. In addition to being the practice leader for AICPA attestation services for cybersecurity and privacy, Gary also helps lead Schellman’s CMMC, NIST, and healthcare assessment practices. Gary’s information security and privacy career spans over 25 years, with CPA licensure in multiple states, certifications as CISA, CISSP, CIA, CCA, PCI QSA, CCSFP, CIPP/US, and CIPT, along with an FIP designation. Prior to joining Schellman in 2006, Gary held information security consulting and audit positions with Carnival Corporation, Protiviti, and Andersen. He has previously served on the HITRUST Assessor Council and now also actively participates in multiple security and privacy industry organizations, such as ISACA, IAPP, and CSA.