What Audiences Get
Carl B. Johnson is a working compliance practitioner who has spent 30 years inside the rules that govern regulated industries. He leads compliance strategy at Cleared Systems, has run more than 200 compliance assessments, and is the author of 16 books on HIPAA, ITAR, CUI, and cybersecurity. The result is keynote content built from current engagements, not last decade's frameworks.
Where most compliance speakers overwhelm rooms with checklists and acronyms, Carl translates regulatory complexity into the decisions leaders actually need to make — what to prioritize, where the real risk lives, and how to build programs that stand up to audits, scrutiny, and change. Audiences leave knowing what to do Monday morning, not just what the framework says.
Choose a Topic
HIPAA Keynote Speaker
HIPAA in the age of AI — how chatbots, automation, and digital tools create new privacy risks for healthcare organizations and what to do about them.
View topic →CMMC Keynote Speaker
CUI, NIST 800-171, and CMMC for federal contractors — practical compliance guidance for companies handling controlled unclassified information.
View topic →ITAR Keynote Speaker
ITAR and export controls for modern businesses — defense data, technical data, foreign person access, cloud systems, and the mistakes that lead to costly violations.
View topic →AI Governance Keynote Speaker
The future of compliance — where AI, privacy, cybersecurity, and regulation are converging and how leaders prepare their organizations today.
View topic →Privacy Keynote Speaker
Privacy, technology, and the risks organizations ignore — how modern tools quietly expose data and what leaders can do about it before it becomes a headline.
View topic →Regulatory vCISO Keynote Speaker
Why tools and automation aren't enough — what experienced regulatory leadership delivers for boards, executive teams, and high-risk organizations.
View topic →Audiences Carl Speaks To
Carl's audiences span the regulated economy — the organizations operating under the highest compliance pressure and the executives responsible for getting it right.
- Federal contractors
- Healthcare organizations
- Defense suppliers
- Technology companies
- Hospital and board leadership
- Compliance and privacy officers
- Information security teams
- Legal and risk committees