Technology Leadership · AI Automation · Cybersecurity
Technology that works. Leadership you can trust.
We give growing companies their time back, a clear view of their data, and the security to grow without fear.
Every engagement starts with Consulting: an assessment that shows what your business actually needs. From there, three pillars: a vCISO on retainer to lead your security, managed endpoints to protect every device, and Shamir by Morris Legacy to give you one secure view of your data.
Based in Israel · Available remotely Sunday–Thursday · UTC+3 · Full overlap with US East Coast & UK hours
Who I Work With
Built for growing companies that carry enterprise risk without an enterprise team.
The client
US and UK organizations with 50 to 500 employees, especially manufacturers, healthcare providers and fintechs. No full-time CISO. IT is run by a small team or an MSP, and security is someone's side job.
Usually hired by the CEO or founder, or by the COO, CFO or CTO in larger firms.
The pain
Deals stalling over security questionnaires and SOC 2 or ISO 27001 demands. CISO-level risk without a $250K CISO budget. AI used ad hoc, with company data pasted into tools nobody governs. Manual work eating hours your team should spend growing.
Why Morris Legacy
Real scars, not frameworks: an 18-facility ransomware recovery with zero ransom paid, ISO 27001 and FedRAMP delivered. And I build, not just advise: production software and AI pipelines that removed hundreds of manual hours. Every AI integration is scoped by a CISSP for access, logging and data handling.
Torah Guides Everything
“A person whose judgment, ethics, and approach to every problem is shaped by Torah does not check those values at the office door.”
Everything I build, every client I serve, every decision I make is filtered through Torah values, honesty, responsibility, the sanctity of time, and the obligation to protect what has been entrusted to your care. In cybersecurity, that means treating data with the same vigilance as mitzvot. In AI automation, it means asking not just what can be automated, but what that frees a person to do instead. This is not a tagline. It is how I work.
Proof of Work
One day, start to finish
A financial services company handled hundreds of scanned documents a week by hand: remittances, invoices, compliance letters. Each was opened, read, renamed, filed to SharePoint, and its Jira ticket updated manually.
I designed, built and deployed a Claude-powered pipeline in a single day. It watches the Jira queue, reads each PDF, classifies it, renames it, files it in the right SharePoint folder and closes the ticket. Zero human touches after setup, with CISSP-scoped access controls and audit logging.
Savings that started on day two
The 200 hours a month of manual document handling had a real cost nobody had measured. Once the pipeline went live, that cost disappeared: $92,400 a year, from one day of build time.
No new tools for the client, no retraining. It plugged into the Jira and SharePoint they already used.
200 hours back, every month
That is more than a full-time employee's month, returned to people who were spending it on work a machine does better: reading, renaming and filing documents.
The question is never only what can be automated. It is what that person should be doing instead.
Ransomware recovery, zero ransom
A major ransomware attack hit a Tier-1 automotive supplier serving Ford, GM, Mercedes, Tesla and Toyota. As Global IT Director, I led the recovery across 18 facilities in the US, Canada and Mexico.
First 48 hours. Every facility was cut off from the internet. We restored what we could from limited backups, deployed SentinelOne and scanned everything else, rebuilt servers where needed, and migrated data off damaged servers once it was cleaned.
The months after. Internet came back behind very tight firewall rules while we rebuilt the network: more than 500 subnets collapsed to 7, repeated identically at all 18 sites. Any device could now be found by pattern (10.site.vlan.x), which made monitoring and support predictable everywhere.
Result: every facility back to full operation, zero ransom paid, and a network that went on to ISO 27001 certification across all plants.
A $20M budget across four countries
I ran IT for 18 facilities in the US, Canada and Mexico on a $20M global budget, leading a multinational team across four countries, entirely through distributed remote leadership.
I cut IT operating costs by 20% through vendor consolidation and infrastructure rationalisation, and led post-acquisition integrations in the US, Japan, Canada and Mexico at the same time.
From 65% to 99%+ first-pass yield
Paint inspection on automotive parts was done by people. Repetitive visual checks tire people out, and tired inspectors miss things: dust, hairs and flaws in the paint.
What we built. High-resolution cameras, bright controlled lighting and AI that detects imperfections, measures them and decides against each automotive customer's specs whether a part needs rework. Robots then move each part to the cleared rack or the rework rack.
Results: the inspection line went from 5 people to 1, who keeps racks ready for the robot. Parts reach rework faster, and defective parts shipped to customers dropped to zero, ending the cost of returns, return shipping and lost production time.
20 years · Manufacturing · Healthcare · Financial services · Retail
Services
Security Foundation · Where Every Engagement Starts
One fixed price. Defined scope. Done in about 4 weeks.
Before I recommend anything, I find out what you actually need. A paid assessment of your security posture, devices, data and day-to-day workflows, ending in a written plan: the gaps that matter, in order, and which pillar solves each one.
Ongoing advisory by the hour when you need a senior opinion, and AI quick wins (Claude configuration, workflow Skills, secure integrations to SharePoint, Jira and Salesforce) scoped by a CISSP.
Security starts with knowing what you have.
The first step is a foundation review: we identify your IT assets, then build the policies, standards and procedures that govern them.
- 01AssetsAssets tell you what you have.
- 02PoliciesPolicies say what you require.
- 03StandardsStandards define what compliant looks like.
- 04ProceduresProcedures show how it gets done.
Without that foundation no organization can truly understand its technology, measure its risk or protect it, so that is where we start.
What you get
- Security assessment
- IT asset inventory
- Core policy set
- Standards and procedures
- Prioritized risk report
- 12-month roadmap
- 90 days of your Security Program in Shamir
Add when you need it
- Advisory by the hour
- AI workflow automation
- CISSP-scoped integrations
vCISO Retainer
Board-ready security and senior IT leadership on a monthly retainer, without the full-time hire. vCISO programs, compliance roadmaps (ISO 27001, SOC 2, NIST 800-53, FedRAMP), ransomware and incident readiness, cloud and vendor strategy, and executive risk communication.
PMP-certified delivery when a program can't fail: a $1B Epic EHR deployment across 14 hospitals, 4-country M&A integrations, an 18-facility ransomware recovery with zero ransom paid.
- CISSP
- PMP
- ISO 27001
- SOC 2
- NIST 800-53
- Incident response
Managed Endpoints
Visibility and security for every device. Every workstation and server monitored around the clock, patched on schedule and protected, run by a CISSP on N-able N-sight, the platform I used to run IT across 18 facilities. Problems get caught and fixed before your team notices.
Every plan
- 24/7 monitoring
- Windows, macOS and third-party patching
- managed antivirus
- vulnerability scanning
- remote support
- self-healing fixes
- asset inventory
- monthly report for your insurer or auditor
Add when you need it
- EDR with ransomware rollback
- 24/7 detection and response
- cloud and Microsoft 365 backup
- email security
- password management
Essential · Secure · Complete · Free 30-day pilot on 10 computers
Shamir by Morris Legacy
A single pane of glass: the first screen of the day instead of logging into many systems. Everything that needs you is brought to one place, ranked, and handled there.
One branded, secure portal on top of the tools you already use, with live dashboards, reports, and edits that write straight back to your systems of record. We don't store your business data: Shamir pulls it, shows it, and sends your changes home. Every client runs in their own isolated instance, so nobody else's problem can ever become yours.
Connects to
- Microsoft 365
- Google Workspace
- QuickBooks, with more on request
From the plumber with five vans to the 500-person firm · Starter · Business · Enterprise
About Michael
Michael Morris
Rav · IT Leader · CISSP · PMP
I have spent 20 years leading technology operations at global scale, from a Tier-1 automotive supplier with 18 facilities across the US, Canada, and Mexico, to a $1B healthcare IT programme consolidating 14 medical systems, to AI automation that recovered 200 hours a month for a financial services company in a single day.
The thread through all of it is judgment.
Technical skill is table stakes. What determines outcomes is the ability to see clearly under pressure, communicate risk to people who are not technical, and make decisions that hold up under scrutiny, from boards, from auditors, and from your own conscience.
I am also a rabbi. Torah is not something I keep separate from my professional life. It shapes how I approach every client, every problem, and every decision. A commitment to honesty, to protecting what has been entrusted to you, and to freeing people from unnecessary toil, these are the operating principles of every engagement.
Based in Israel. Available remotely Sunday–Thursday, UTC+3. Full working overlap with US East Coast afternoons and the full UK business day.
Get in Touch
Let's talk
Whether you have a specific engagement in mind or just want to explore whether there is a fit, reach out. I respond to every message.
Currently available: Sunday–Thursday, UTC+3 · Response within one business day