Search hans.study
Indexed across articles, news, KB updates, knowledge base, books, learning, and tools. Press Esc to close.
// MEDIA AND PRESS · HANS STUDY
Hans Study is available for press interviews, podcast guesting, expert commentary, and conference panels. The topics where he has the deepest field experience are listed below.
Canadian defense contractors working in US and Canadian supply chains now face mandatory cybersecurity certification. CMMC Phase 1 enforcement began November 2025; Phase 2 was suspended July 13, 2026, pending review. CPCSC Level 1 has been in select contracts since summer 2026, with Level 2 planned for April 2027 to March 2028 in PSPC's timeline. Hans speaks to the technical realities of meeting NIST SP 800-171 controls in environments designed before the rules were written.
Critical infrastructure operates control systems where a network failure or a security breach has consequences beyond data loss. Hans has worked on OT segmentation, IT and OT convergence, and NERC CIP advisory across Canadian utilities and US critical infrastructure operators.
The network is the security system now. Cameras, access control panels, and intrusion devices all run on IP. The teams responsible for the network and the teams responsible for the physical security system rarely talk to each other. That gap is where most security incidents now start.
Predictive design, validation survey, and troubleshooting on enterprise Wi-Fi deployments. Trained on Ekahau and CWNP material. Field experience across Cisco, Aruba, and Meraki wireless in airports, transit, government, and enterprise environments. Hans speaks to why most enterprise Wi-Fi deployments under-perform, what predictive design actually catches, and where the gap between the marketing material and the operational reality shows up.
Platform expertise across the major physical security platforms. Hans speaks to architecture mistakes, common deployment failures, sizing, federation at scale, and the gap between integrator marketing and field reality.
Trained in mobile device forensics and computer forensics. Field experience handling evidence networks and isolated investigative environments for law enforcement and corporate investigations. Hans speaks to chain of custody, evidence network design, and the infrastructure side of digital forensics that does not get covered in the tools-and-techniques content.
The conflict-of-interest problem in a market where almost every consultant carries vendor partnerships. Why independent assessment exists and who actually pays for it.
Hans taught Cisco CCNA, Introductory and Advanced Networking, Information Security, and Microsoft Windows Server and Workstation at the post-secondary level for multiple years. Hundreds of students went through those programs. The teaching shaped the advisory work. Both depend on being able to explain why, not just how.
Author of the Study Guide series, field references for integrators and defense suppliers, 3 titles published in 2026:
Review copies and bulk orders: book@hans.study. Full catalogue at hans.study/books/.
Quoted on the EU Cyber Resilience Act and where responsibility for software dependencies lands when companies build, sell, or place products with digital elements on the market.
If you have published a piece that quotes or references Hans Study, send a note to media@hans.study and it gets linked here.
Approved crops for editorial use with coverage. Download the file as supplied; it carries the credit, copyright, and licence in its metadata.
Credit line: Photo: Hans Study / hans.study
Usage: editorial use with the credit line. Keep the approved crop, and don't recolour the image or add effects. Anything beyond editorial use needs written permission from media@hans.study.
A speaker one-pager with bio and topic abstracts is available on request. Email media@hans.study.
Marks, palette, typography, and the full design system are published at hans.study/brand/. The page includes individual asset downloads, a bundled ZIP, the colour palette, typography references, every callout and component used across the site, and the licence and usage terms. Use beyond the permitted editorial scope listed there requires written permission to media@hans.study.
Direct quotes from articles published on hans.study are permitted with attribution to "Hans Study (hans.study)" and a link back to the source article. Reprint of full articles requires written permission. Email media@hans.study.
Ready-to-use pull quotes for stories on security posture, defence in depth, and the work that does not require AI. Attribute to Hans Study, CISSP, independent network and security consultant (hans.study). No clearance required for these specific quotes.
The low hanging fruit is still sitting there in plain view: default credentials, exposed management interfaces, ancient firmware, shadow devices nobody bothered to inventory, and access control lists written in a rush, never reviewed, and left to rot for years. None of that needs AI to find it. It needs someone to stop ignoring obvious problems because they are boring or they take time.
Security is not about making targets impenetrable or untouchable. It is about making them not worth the effort. I have always described security and security controls as a series of speed bumps. They are there to slow an attacker down, make the path annoying, and make the whole thing feel like more trouble than it is worth. Some of those speed bumps are bigger than others. Smaller cars will not make it over all of them, and that is a successful day. Someone with enough determination, or a big enough vehicle, may still get where they are trying to go. The ride should be miserable for them. That is good defense.
Need a quote tailored to your angle? Email media@hans.study with the topic and deadline.
For journalists on deadline
If you are working a story on tight deadline and need a quote on infrastructure security, OT, physical security, or compliance, email media@hans.study with "deadline" in the subject and the date you need it by, so it gets read first.
Email media@hans.study for full media kit assets.
Two tools run by default to help me understand how the site is used. You can turn either off at any time. Cloudflare's server-side analytics is always on and never sees your identity.
