About SPM Advisors — Built on Intelligence, Law, and 20 Years of Doing the Work

Strategic security and privacy leadership — built on 20+ years of operational experience, legal training, and executive advisory work

Kenneth Vignali

Founder & Chief Security Officer

Kenneth Vignali founded SPM Advisors after more than 20 years operating at the intersection of intelligence, security, and law — across military counter-intelligence, Fortune 100 corporate security programs, and cybersecurity consulting for organizations in healthcare, legal, and financial services.

His background is not common in the advisory market. He came from Dell SecureWorks and GuidePoint Security — firms that handle the security programs of the largest enterprises in the world. He holds GIAC certifications (GCIH, GSTRT, GCTI) and the CERT Insider Threat Program Manager designation from Carnegie Mellon University’s Software Engineering Institute — the only certification of its kind. He holds a Juris Master in National Security, Cybersecurity, and Information Privacy Law from Antonin Scalia Law School at George Mason University, and a Master of Science in Cybersecurity.

Kenneth is a 100% permanently and totally disabled U.S. Army veteran. His service included intelligence operations and physical protection assignments — roles that required assessing human risk, managing protective details, and operating in environments where a missed signal had real consequences. That foundation informed everything that followed: counter-intelligence work, digital forensics, and two decades of corporate security advisory at the enterprise level. His forensic and counter-surveillance work has been referenced in legal proceedings in the United States, Europe, Canada, and Australia. He has been recognized by Dell SecureWorks for incident response expertise.

What that means for clients: you get the judgment, the credentials, and the legal framework awareness of someone who has operated at enterprise scale — at the engagement size and cost structure that works for a medical practice, a law firm, or a nonprofit.

Book a Call with Kenneth

Military & Government

  • 20+ Years Government Experience
  • Military Cybersecurity Operations
  • Security Clearance Background
  • Critical Infrastructure Protection
  • Federal Compliance Expertise

SANS/GIAC Certifications

  • GCIH - GIAC Certified Incident Handler
  • GSTRT - GIAC Strategic Planning, Policy, and Leadership
  • GCTI - GIAC Cyber Threat Intelligence
  • CERT Insider Threat Program Manager

Education

  • Masters in Cyber Security
  • Juris Masters in National Security, Cyber Security and Information Privacy
  • Bachelors in Business and Information Management

Compliance Expertise

  • HIPAA Healthcare Security
  • SOC 2 Type II Audits
  • PCI DSS Payment Card Security
  • GDPR Privacy Compliance
  • NIST 800-171 (DFARS)

Official Certifications

GIAC Certified Incident Handler (GCIH)

GCIH - Incident Handler

GIAC Strategic Planning, Policy, and Leadership (GSTRT)

GSTRT - Strategic Leadership

GIAC Cyber Threat Intelligence (GCTI)

GCTI - Cyber Threat Intelligence

CERT Insider Threat Program Manager Certification Seal

ITPM - Insider Threat Program Manager

Trace Labs Judge - Global OSINT Search Party CTF

Trace Labs CTF Judge

Trace Labs CTF Coach - Global OSINT Search Party CTF

Trace Labs CTF Coach

Verified Veteran™ - Hire Heroes USA

Verified Veteran™

Giving Back

Using our expertise to protect those who need it most

Supporting Domestic Violence Survivors

Kenneth personally dedicates time to helping survivors of domestic violence reclaim control of their digital lives — removing stalkerware, cleaning up exposed personal data, and establishing safe communications. This is pro bono work, done because the need is real and the skills apply directly.

Device Security

Removing stalkerware, spyware, and unauthorized access from phones, laptops, and tablets. Compromised accounts secured. Safe communications established.

Digital Footprint Review

Identifying exposed personal information, location data, and privacy vulnerabilities across a survivor's online presence.

Data Broker Cleanup

Removing personal information from data broker sites, public records, and social media to limit an abuser's ability to track or locate a survivor.

Digital Safety Education

Secure communications, account hardening, and recognizing technology-facilitated abuse — practical knowledge for ongoing safety.

Work With Us

If you represent a domestic violence organization, shelter, or survivor services provider and want digital safety support for your clients, reach out.

Get in Touch Family Sentinel Blog