John Stephen is the Chief Information Security Officer at Convergence Networks and a CMMC Level 2 Certified Practitioner. He holds CISSP, CRISC, CISA, CEH, PenTest+, Security+, and ITIL Foundation certifications. John specializes in enterprise cybersecurity, compliance, third-party risk management, and cloud security, helping organizations bridge the gap between technical security controls and business risk while navigating frameworks such as NIST SP 800-171 and CMMC 2.0.
From the Fall 2026 Issue
Cloud Security
Securing Microsoft 365 Migrations: A Zero-Trust Cloud Adoption Framework
Author(s):
John Stephen, Chief Information Security Officer, Convergence Networks
Unchecked legacy permissions, unclassified content, and delayed access controls expose sensitive corporate data during Microsoft 365 migrations. The implementable remedy is a Zero-Trust Cloud Adoption Framework that sequences three controls: a pre-migration audit
