This page describes the frameworks that govern Parapet Advisory Group's methodology, the regulatory environments we navigate on behalf of clients, our internal data handling practices, and our credentials and certification roadmap.
Transparency notice: PAG is a privately held advisory firm. We align our methodology with industry frameworks and help clients achieve compliance — but we distinguish clearly between frameworks we are aligned with and certifications we are formally certified to. Where a certification is in progress or planned, we say so explicitly. We believe this distinction matters, and that a cybersecurity firm that overstates its credentials is not one worth hiring.
PAG's assessment and advisory methodology is built on the National Institute of Standards and Technology Cybersecurity Framework (NIST CSF 2.0) — the most widely adopted cybersecurity risk management framework in the United States, and the standard against which most enterprise and institutional security programs are measured.
The NIST CSF organizes cybersecurity activity across six functions. PAG's services map directly to these functions. When a client engages PAG for an estate security assessment or family office audit, the deliverable is structured to evaluate posture and identify gaps across all applicable functions.
PAG assessment reports are structured to map findings to NIST CSF function categories, enabling clients to present findings to legal counsel, family office boards, or institutional partners in a standardized format. The addition of the Govern (GV) function in CSF 2.0 reflects the increased emphasis on board-level accountability for cybersecurity risk — an area PAG specifically addresses in family office engagements.
Beyond NIST CSF, PAG's advisory methodology draws on additional frameworks depending on the client's sector, risk profile, and specific engagement scope. These are not certifications — they are the technical and procedural standards against which PAG benchmarks its recommendations.
PAG is not a compliance auditor and does not issue certification opinions. However, many of the clients PAG serves operate in regulated environments — healthcare, financial services, real estate — or handle information that is subject to state and federal privacy law. PAG's advisory work is conducted with awareness of these regulatory requirements, and our deliverables are designed to be compatible with clients' existing compliance obligations.
The information clients share with Parapet Advisory Group during an engagement is among the most sensitive data we will ever handle. Our internal practices are designed to ensure that the trust clients place in PAG extends to the operational level of every engagement.
The following certifications and qualifications are held by PAG's principal, Dan Mirsky. They reflect a career that spans law enforcement, enterprise IT leadership, and technical systems administration.
| Credential | Issuing body | Category | Status |
|---|---|---|---|
| Certified Law Enforcement Officer | State of Florida · FDLE | Law Enforcement | Held · 20 years service |
| Citrix XenApp 6.5 Administration | Citrix Systems | Infrastructure | Certified |
| Microsoft Certified Technology Specialist — Dynamics GP | Microsoft Corporation | Enterprise Systems | Certified |
| Advanced Certified Engineer (ACE) | Xinuos, Inc. | Systems Engineering | Certified |
| Certified UNIX Systems Administrator (CUSA) | Xinuos, Inc. | Systems Administration | Certified |
| DUI Standardized Field Sobriety Testing | IPTM · University of North Florida | Law Enforcement | Certified |
| CPR / AED | American Heart Association | Emergency Response | Certified |
The following credentials and affiliations are actively planned or in progress. We list them here because we believe transparency about our roadmap is more valuable to serious clients than silence or vague aspiration.