Kestralis Group · Corporate Security Advisory
Security advisory, workplace violence prevention, and business continuity for U.S. organizations that take the work seriously — led by operators who have done it inside and outside the enterprise.
The Problem
The category is crowded with generalists selling compliance theater — templated plans, one-day trainings, binders that satisfy a procurement checklist and nothing else. When a threat actually materializes, those programs fail quietly and then loudly.
Kestralis Group works differently. Our principals have designed and run security programs inside Fortune-scale organizations, and operated in environments where getting it wrong had irreversible consequences. We bring that discipline to mid-market clients who need serious capability and cannot afford a full-time security director.
— Capability
Six service lines · Engaged individually or as an integrated program
Program · Retainer
Program design and management that goes beyond California SB-553 — built by practitioners, not HR generalists.
Program · Retainer
Resilience programs built for the moment they're needed — led by a Certified Business Continuity Professional.
Case · Retainer
Structured WAVR-21 assessment and management when an employee, customer, or outside party becomes a concern.
Assessment · Program
Security program design and physical security assessments by people who have operated against hardened targets.
Advisory · Retainer
Risk-first cyber advisory for mid-market organizations without a full-time CISO.
Case · Expert
Licensed workplace investigations and expert witness support — reports built to hold up under scrutiny.
See also
Engagement model— Compliance penalty
Effective 2024-07-01
$0
Maximum per-willful-violation Cal/OSHA penalty.
Serious violations carry up to $25,000.
Every covered employer must maintain a written plan, violent incident log, and annual training. Cal/OSHA's permanent standard drops by end of 2026 — every existing plan will need to be updated.
The Principals
Managing Member
Mark served in the United States Army Ranger Regiment, Special Forces, and 1st Special Forces Operational Detachment-Delta. He later ran Coca-Cola's Division President office in Europe and founded a licensed private investigations agency before establishing Kestralis Group.
Chief Operating Officer
John is an Army veteran with deployed tactical operations experience. He currently leads global security risk at Dow, and previously ran risk & resilience at Catalent and the Global Security Operations Center at Exact Sciences. He holds CBCP and Advanced Executive Protection certifications.
Why Kestralis
Every engagement is led by a principal who has done this work at enterprise scale and in the field — not an analyst applying a template.
When a threat assessment escalates, we don't hand you off. A licensed PI agency is in the same firm, working the same case.
Every deliverable is written to hold up in front of a Cal/OSHA inspector, a plaintiff's attorney, or a board. That is the standard.
Thirty minutes with a principal. No sales pitch, no procurement gauntlet. If we're the right fit, we'll say so. If we're not, we'll tell you who is.
