Andy Spoone

Developing technology solutions to accelerate compliance. I design and build compliance systems that connect standards to operational data. My work focuses on the layer between compliance requirements and the tools organizations already in use: identity platforms, engineering systems, data warehouses, quality systems, ticketing workflows, and security tooling. Recent projects include: • Mapping SOC 2 and ISO 27001 controls to operational data in a shared warehouse, then building agent skills that populate evidence requests with traceable source context. • Applying ISO 9001 processes in support of life-sciences GxP requirements, including agent assisted reporting across engineering tools and supporting validation documentation. • Aligning CMMC Level 2 scope, control ownership, and system boundaries while using agent dashboards to support continuous reporting and System Security Plan maintenance. Compliance should be an observable result of healthy operational systems, not a separate document-collection exercise.