Paul Johnson

Risk Advisory Senior Manager

Paul Johnson works with clients to assess, improve, and test the security of their information systems.  He also helps clients determine their compliance with the Payment Card Industry Data Security Standard (PCI DSS) and health care security compliance including HIPAA and HITECH.

Prior to joining Wipfli, Paul led the Vulnerability Assessment and Project Office teams at NetSPI, a regional Information Security Consulting firm.  He also served as the Information Security Director at HealthEast Care System, the largest health care provider in the Twin Cities’ East Metro area.

Professional Organizations and Activities
Paul is a member of the American Institute of Certified Public Accountants (AICPA).  He is also a member of the Information Systems Security Association (ISSA) and the Minnesota Chapter (MN-ISSA), as well as the International Information Systems Security Certification Consortium, Inc.