BRETT SAMMIS
Brett serves as Director of Risk and Compliance at Rackner and Managing Partner at Fourth Order Effects, specializing in application security, risk management framework compliance, and information security management systems. A Certified CMMC Professional (CCP) and CISSP, he is currently pursuing the CMMC Certified Assessor (CCA) credential and brings more than two decades of cybersecurity, intelligence, and program management experience spanning military, NATO, and commercial environments.
​
At Rackner, Brett was promoted to Director of Risk and Compliance in 2025 after two years as a Cybersecurity Engineer providing application security engineering for a government DevSecOps contract, and now leads compliance efforts to build and maintain a Body of Evidence for ISO 27001, CMMC Level 2, and CMMI Level 3 certifications. Previously, as an executive consultant at iSenpai, he built an integrated management system spanning ISO 27001, ISO 9001, and ISO 20000-1/CMMI that helped win a $12.6 billion contract vehicle. Earlier in his career, Brett spent nearly four years with NATO Allied Command Transformation in Norfolk, first as Intelligence and Cyber Threat Training Program Manager and later as Data Analytics and Fusion Program Manager, developing training and analytic capabilities across 29 member nations and leading the inaugural delivery of the Cyber Threat Operations Course at the Collective Cyber Defense Center of Excellence in Estonia.
​
A veteran of the U.S. Army and U.S. Air Force, Brett held intelligence and security roles in South Korea, the United Kingdom, and Iraq, including postings as Battalion Operations Officer and Cyber Threat Operations Manager in Harrogate, England, and Intelligence and Security Senior Advisor in Iraq. He holds the U.S. Air Force Master Instructor Badge and taught as an Assistant Professor of Aerospace Studies for the Air Force earlier in his career.
​
Brett earned his M.S. in Technical Intelligence with a Cybersecurity emphasis from the National Intelligence University, an M.A. in History from Norwich University, and a B.S. in Computer Science from Texas Christian University. He holds the CISSP, GIAC Defensible Security Architecture (GDSA), GIAC Web Application Penetration Tester (GWAPT), GIAC Certified Incident Handler (GCIH), Certified CMMC Professional (CCP), PRINCE2, and CMMI Associate certifications.
