Gabriel Fonseca

Blackwood Enterprises is a cybersecurity company helping growing organizations reduce cyber risk, protect customer data, and strengthen the practical security controls needed to support trust, growth, and security readiness. The company focuses on cybersecurity risks that often sit between technology, people, processes, permissions, documentation, and business operations. Core areas of work include: • Cyber Risk Assessments • Client Data Protection Reviews • Account Compromise Risk Reviews • Access Governance & Permission Reviews • Identity and Access Control Reviews • Security Control Gap Assessments • Customer Security Review Readiness • Cyber-Insurance Readiness • Incident Readiness Planning • Security Policy and Procedure Development • Operational Security Reviews Recent engagements have helped organizations: • Identify client-data exposure and access-control risks • Improve identity-security and account-recovery practices • Review access permissions across sensitive systems • Strengthen offboarding and employee lifecycle controls • Improve visibility into information-sharing and permission management • Reduce dependence on informal security processes • Strengthen documentation, accountability, and operational security controls • Prepare for growth in trust-dependent and security-sensitive environments Blackwood’s approach is practical and business-oriented. Rather than focusing only on technical vulnerabilities, engagements examine how account access, permissions, documentation, workflows, approvals, vendors, ownership, and human behavior contribute to cybersecurity risk. The objective is simple: Help organizations protect customer trust, reduce preventable cyber risk, and strengthen the controls that support secure growth.

Supporting the development of AI governance and institutional readiness initiatives for public-sector and civic-critical environments. Work focuses on helping cities and government-adjacent organizations assess AI adoption readiness, governance maturity, operational exposure, and institutional accountability before moving into implementation. Contributions include: • AI readiness framework development • Governance baseline design • Executive workshop structure • Institutional risk and accountability mapping • AI exposure and shadow AI assessment models • Governance dashboard and reporting design • Public-sector AI adoption readiness analysis • Responsible AI implementation planning This work supports Blackwood’s broader focus on cybersecurity, responsible technology adoption, operational resilience, and the protection of sensitive information in high-trust environments.

Supporting enterprise deployment, migration strategy, and operational implementation for multilingual AI voice and conversational AI systems. Work focuses on helping organizations evaluate, plan, and operationalize AI-enabled communication infrastructure across customer operations, sales workflows, support environments, and internal communication systems. Focus areas include: • Enterprise AI voice deployment planning • Conversational AI workflow integration • Migration and implementation coordination • Customer operations use-case mapping • Technical discovery and stakeholder alignment • AI-enabled communication process design • Governance-aware deployment support This work complements Blackwood’s cybersecurity focus by strengthening experience in secure technology adoption, operational implementation, stakeholder alignment, and responsible AI-enabled business transformation.

Advised organizations on cyber risk, operational resilience, access governance, information handling, documentation systems, and security-related control gaps. Worked with organizations where sensitive information, operational reliability, accountability, and trust were critical to business performance. Engagements focused on identifying how fragmented processes, weak controls, inconsistent documentation, excessive access permissions, and unclear ownership created cybersecurity and operational risk. Areas of work included: • Cyber risk and security exposure assessments • Access-control and permission reviews • Information-handling reviews • Operational risk assessments • Governance and accountability mapping • Documentation and record-management system design • Incident-readiness and response-planning reviews • Business continuity and operational resilience assessments • Security control-gap identification • Policy and procedure development • Workflow and process analysis • Decision ownership and escalation framework development A recurring finding across engagements was that many security and operational failures originated not from technology alone, but from weak controls, unclear ownership, inconsistent processes, poor documentation, and insufficient visibility into how information was accessed, shared, and managed. This work formed the foundation for Blackwood Enterprises’ focus on cyber risk reduction, client-data protection, access controls, operational resilience, and practical cybersecurity improvement.