Legal notices, disclosures, and information about Materialiti Risk Advisory.
Effective Date: January 1, 2026 | Last Updated: January 1, 2026
Materialiti Risk Advisory is an independent advisory practice operated by Thomas Jones. All client engagements are conducted under formal written agreement between the client and the operating entity.
Materialiti Risk Advisory maintains no vendor affiliations, no platform dependencies, no consulting firm parent with conflicting engagements, and no equity or financial interest in any technology product or platform.
Any commercial relationship material to an engagement will be disclosed immediately, in writing, and prior to commencement of work. The absence of such disclosure is itself a representation that no material commercial relationship exists.
This independence is a structural feature of the practice. It is not a marketing claim. It is verifiable by any prospective client through direct inquiry prior to engagement.
Materialiti Risk Advisory is not a licensed law firm, accounting firm, registered investment advisor, or licensed securities dealer. Services provided are advisory in nature and do not constitute legal, financial, accounting, tax, or investment advice.
Clients are encouraged to obtain independent legal and financial counsel regarding any decisions informed by Materialiti advisory services.
Thomas Jones holds the following credentials referenced on this Site:
Co-authored work with NIST and MITRE is referenced for attribution purposes. Those organizations retain full intellectual property rights over their respective frameworks and publications. Such references do not imply endorsement of Materialiti Risk Advisory by NIST, MITRE, or any government agency.
The Cybersecurity Evidence and Measurement Standard (CEMS), Part 1: Foundations of Cybersecurity Measurement, authored by Thomas Jones, is published under Creative Commons Attribution 4.0 International License (CC BY 4.0).
You may use, share, and adapt this work, including in commercial contexts, under the following conditions:
The CEMS name and associated documentation remain the intellectual property of Thomas Jones. Redistribution in altered form must clearly indicate the source and any changes made.
The following are trademarks of Materialiti Risk Advisory and may not be used without prior written consent:
All information shared with Materialiti Risk Advisory in connection with a prospective or active engagement is held in strict professional confidence. Client identities, engagement details, findings, and deliverables are not disclosed to any third party without explicit written consent, except as required by applicable law or court order.
Case descriptions on this Site are illustrative of engagement type and outcome. They do not identify clients. Any resemblance to a specific organization is coincidental unless the client has provided explicit written consent to be identified.
All advisory services are provided on a best-efforts basis. Materialiti Risk Advisory makes no representations or warranties, express or implied, regarding the accuracy, completeness, or fitness for a particular purpose of any advice, analysis, or deliverable.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MATERIALITI RISK ADVISORY SHALL NOT BE LIABLE FOR ANY INDIRECT, CONSEQUENTIAL, INCIDENTAL, OR PUNITIVE DAMAGES ARISING OUT OF ANY ENGAGEMENT OR YOUR USE OF THIS SITE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
These legal terms and any disputes arising from use of this Site or engagement with Materialiti Risk Advisory shall be governed by the laws of the United States and the state of [STATE].
Legal inquiries may be directed through the contact form at materialiti.com.
Copyright © 2026 Materialiti™ Risk Advisory. All rights reserved.