Episode Summary Thomas Hernandez explains how OSaava Services turns cybersecurity strategy into execution. Brian talks with Thomas about his path from Army communications and cybersecurity into operational leadership, and how that experience shapes his work as COO of OSaava Services. Thomas shares how OSaava helps federal and enterprise clients with cybersecurity, enterprise IT modernization, data architecture, and troubled execution environments. He also explains why AI, zero trust, and digital transformation only create value when organizations understand the workflows, risks, and decisions behind them. The conversation closes with where OSaava is heading next and how Thomas thinks about growth, partnerships, and practical execution. Key Takeaways Cybersecurity creates more value when it is treated as an operational model tied to business risk. OSaava’s work centers on execution, especially when complex technology projects are behind schedule, over budget, or underperforming. AI can create capacity, but organizations still need clear workflows, governance, and human decision making around how it is used. Strong founder-led companies often reach a point where operations must be built beyond the founder’s inbox. Small firms can compete by knowing their lane, staying vendor agnostic, and delivering high-touch outcomes. Speaking, conferences, LinkedIn, podcasts, and community engagement can help technical firms build trust beyond referral channels. Timeline Opening and Background 00:00 Brian introduces Thomas Hernandez and OSaava Services. 00:39 Thomas shares how his Army career built a foundation in engineering, cybersecurity, and mission execution. 01:45 Thomas explains how he connected with OSaava CEO Sam Marwood after DEF CON training. 03:14 Thomas describes stepping into a new COO role and helping move operations out of the founder’s head. Operational Focus 06:41 Thomas explains OSaava’s focus on cybersecurity, enterprise IT modernization, data architecture, and federal or large enterprise clients. 07:27 Thomas describes how OSaava helps tier one primes recover troubled projects. 08:19 Thomas explains why process clarity matters before automation or digital transformation. 10:11 Thomas breaks down how OSaava differentiates through proven execution, subcontractor delivery, and a vendor agnostic model. Cybersecurity, AI, and Risk 11:07 Thomas explains why cybersecurity should not be reduced to a compliance exercise. 12:26 Thomas describes OSaava as a service-disabled veteran-owned small business that operates with focus and excellence. 13:37 Thomas defines OSaava as a high-touch, white-glove services firm built around true partnership. 14:39 Thomas discusses referrals, LinkedIn, podcasts, conferences, and organic marketing channels. Growth and What Comes Next 17:12 Brian and Thomas discuss the authority-building value of speaking at conferences. 18:06 Thomas shares his experience giving keynote speeches, including a talk in Puerto Rico on cybercrime and the Caribbean. 20:46 Thomas looks ahead to scaling OSaava, expanding enterprise clients, and strengthening partnerships. 21:20 Thomas discusses zero trust, buzzwords, and the need to explain how technical shifts affect organizations. 22:23 Thomas explains the opportunity and concern around AI, governance, and decision making. 23:49 Thomas shares that OSaava was selected as an awardee on the Golden Dome acquisition vehicle in November 2025. 24:38 Thomas shares how listeners can connect with OSaava, find opportunities, or reach him directly. Links and Resources LinkedIn: https://www.linkedin.com/in/ttechnology/Company: http://www.osaavaservices.com