Corey Lancaster,
Founder.
26 years at the intersection of national security, enterprise risk, and executive leadership. Air Force combat veteran. Five-time published author. The security leader mid-market companies call when the stakes are real.
Corey Lancaster has spent 26 years at the front lines of cybersecurity — not in theory, but in practice. From classified defense programs at Northrop Grumman, Raytheon, and BAE Systems to large-scale federal IT security operations supporting the Department of Health and Human Services, Corey has led security organizations through the full spectrum of modern threats.
His career spans the defense industrial base, federal civilian agencies, financial services, and commercial enterprise. He has built security programs from the ground up, led large IT Security and Operations teams, and advised executives and boards on risk posture, compliance strategy, and incident response.
Before his civilian career, Corey served as an Air Force combat veteran — an experience that shaped his approach to leadership, decision-making under pressure, and the discipline required to protect critical assets.
He founded CAAS to solve a problem he saw repeatedly across the mid-market: organizations carrying enterprise-level risk without the executive security leadership to manage it. CAAS delivers that leadership — right-sized, right-priced, and ready on day one.
26 years leading cybersecurity across defense, federal, and commercial sectors
Air Force combat veteran — discipline and mission focus at the core of every engagement
Led large IT Security and Operations team supporting the Department of Health and Human Services
Five-time published author on cybersecurity leadership, AI security, and enterprise risk
Deep expertise in NIST, CMMC, HIPAA, SOC 2, ISO 27001, and PCI DSS frameworks
Board and executive advisory experience across regulated industries and the defense industrial base
Forged in service.
Built for mission.
Corey's foundation in security leadership was built long before his corporate career — in the United States Air Force, where he served as a combat veteran. Military service instilled the principles that define his approach to every engagement: mission clarity, disciplined execution, and accountability under pressure.
Those principles translate directly to cybersecurity leadership. When an organization faces a breach, a compliance deadline, or a board demanding answers, the ability to operate with calm precision isn't a soft skill — it's a survival skill. It's what separates a security leader from a security manager.
CAAS is veteran-owned and Virginia-based. That heritage is not a marketing line — it's a commitment to the same standard of service Corey brought to his country.
Earned, not inherited.
CISM
Certified Information Security Manager
CDPSE
Certified Data Privacy Solutions Engineer
Associate C-CISO
Associate Certified Chief Information Security Officer
AI Certified Consultant
Artificial Intelligence Certified Consultant
ITSMF Executive Leadership
IT Service Management Forum Executive Leadership Academy Certificate
MS — Information Systems Security Management
Master of Science in Information Systems Security Management
26 years. The organizations
that trust the mission.
Five-time published author.
AI Security Under Fire
Cutting Through the Hype
A practical guide for security leaders navigating the risks of AI adoption. Frameworks, threat models, and governance structures — no hype.
Cybersecurity Leadership
Building and Leading High-Performance Security Teams
Lessons from 26 years leading security organizations across defense, federal, and commercial sectors.
The CISO Playbook
Practical Strategies for Modern Security Leaders
A field guide for CISOs navigating board expectations, regulatory pressure, and rapid technology change.
Zero Trust in Practice
Implementing Modern Security Architecture
A hands-on guide to Zero Trust architecture — from strategy to implementation across enterprise and mid-market environments.
Governing the Digital Enterprise
Risk, Compliance, and Security for Executives
Written for executives and board members who need to understand cyber risk without getting lost in the technical weeds.
Ready to work with
someone who's been there?
Fifteen minutes. No pitch. Just a conversation about where your organization stands and what executive security leadership could look like for you.
Book a 15-Minute Briefing