The Company

A European company for European AI governance.

OneCompliant s.r.o. is registered in the Slovak Republic and built EU-first: AI governance, security, and compliance for regulated European enterprises — designed and delivered from inside the regulatory environment it serves. The OneCompliant platform — OASAT, OASF, OASAP, and Aegis — is deployed in production at a tier-1 European telecommunications operator.

OneCompliant is deliberately founder-led. Clients work directly with the former Global CISO who built the platform — senior expertise on every engagement, scaling through specialist partners when a programme requires it.

OneCompliant s.r.o. Registered in the Slovak Republic EU-based · EU-focused In production at a tier-1 European telecom

Kevin Wade Stout — Founder, OneCompliant s.r.o.

Available for briefings

Founder & Global CISO

Kevin Wade Stout

Founder & Managing Director — OneCompliant s.r.o.

Kevin Wade Stout is an internationally recognised cybersecurity and AI security executive with more than two decades of experience leading security programmes across global enterprises, critical infrastructure, telecommunications, healthcare, aviation, defence, and government environments. He is the Founder and Managing Director of OneCompliant s.r.o., where he has developed the OASF, OASAT, OASAP, and Aegis governance platform.

CISM — Active DoD / DHS US Air Force Top Secret / SCI EU Permanent Resident Based in the European Union

Request a Briefing LinkedIn — 12,800+ connections

Career & Experience

20+ years at the front line of regulated enterprise security.

Kevin's career spans global enterprise security leadership, defence and government, and AI security at operational scale. Every product and service OneCompliant delivers is grounded in this lived experience — not theory.

2024 — Present

OneCompliant s.r.o.

Founder & Global CISO — Based in the European Union

Founded OneCompliant s.r.o. to help organisations adopt artificial intelligence securely, responsibly, and at scale. Developed proprietary methodologies including the OneCompliant AI Security Framework (OASF), AI Security Assessment Toolkit (OASAT), AI Security Awareness Programme (OASAP), and Aegis — an emerging AI governance and control platform providing policy enforcement, risk management, auditability, and runtime governance for enterprise AI environments.

OASFOASATOASAPAegisAI Governance

2023 — Present

Leading European Telecommunications Operator

Embedded AI Security Executive — Slovakia

Embedded daily as AI Security Executive at one of Europe's leading telecom operators. Production gate authority — no AI capability proceeds to cloud or production without Kevin's security recommendation. Delivered the Agentic AI and Digital Twins security briefing directly to the CISO, which was adopted as the operational standard. OASAP awareness programme adopted across the organisation in multiple languages and published on the operator's official learning management platform.

AI SecurityCISO AdvisoryNIS2OASAP DeployedDigital Twins

Previous Role

Merck KGaA

Head of Global Information Security

Served as Head of Global Information Security at Merck KGaA, leading a global cybersecurity organisation of more than 60 professionals responsible for Security Operations, Incident Response, Vulnerability Management, Application Security, Security Engineering, Governance, Risk & Compliance, and security services supporting business operations across Europe, Asia-Pacific, the Americas, and the Middle East.

Global CISO60+ person orgGxPPharmaceuticals60+ countries

Previous Roles

US Department of Defense / Department of Homeland Security

Senior Security & Intelligence Roles

Supported U.S. government and defence missions including assignments supporting the Department of Defense and Department of Homeland Security in the United States, Afghanistan, and Africa. These experiences provided a foundation in operational security, cyber defence, incident response, and risk management under high-pressure conditions. Top Secret/SCI clearance held.

DoDDHSTop Secret/SCICritical InfrastructureIntelligence

Foundation

United States Air Force

Military Service — Security & Operations

Military service in the United States Air Force — providing the operational discipline, security mindset, and mission-critical standards that underpin Kevin's approach to enterprise security and AI governance. The Air Force foundation shaped the conviction that security controls must be operational, not theoretical.

US Air ForceMilitarySecurity Operations

Why OneCompliant

The problem was impossible to ignore.

"AI security is not primarily a technology challenge. It is a governance, risk management, and business leadership challenge. I have spent more than two decades building security in environments where failure has real consequences — lives, national security, regulatory sanctions. When AI arrived, organisations adopted it at speed with zero governance and zero enforcement. OneCompliant exists to close that gap — with controls that work in the real world, not just in framework documents."

Operational Experience

OneCompliant's frameworks and products are built from real enterprise deployments — not academic models. Every control in OASF has been tested against real regulatory scrutiny in real regulated environments.

CISO Perspective

Kevin has sat in the CISO chair at global enterprise scale. OneCompliant speaks the language of the CISO because it was built by one — for a problem that every CISO in a regulated industry is facing right now.

EU Operational Base

Registered and operating in the Slovak Republic as an EU company. Working daily in EU regulated industries. The EU AI Act is not a distant regulation — it is the operating environment OneCompliant was built for.

Areas of Expertise

The disciplines that built OneCompliant.

AI Governance & AI Security

Runtime AI governance, policy enforcement, AI risk assessments, prompt injection defence, and AI governance programme development across regulated industries.

Regulatory Compliance

EU AI Act, NIST AI RMF, ISO 42001, NIS2, GDPR, DORA, ISO 27001 — practical implementation across the frameworks regulated enterprises are accountable to.

Critical Infrastructure & Telecom

Security of operational technology, national critical infrastructure, telecommunications security, and NIS2 compliance where system failure has safety consequences.

Enterprise Security Leadership

CISO advisory, enterprise security strategy, board and executive stakeholder engagement, security transformation, and global security programme management.

Security Operations & Response

Security operations centres (SOC), incident response, threat detection, vulnerability management, and cyber defence under high-pressure operational conditions.

Cloud Security & Zero Trust

Cloud security architecture, Zero Trust implementation, DevSecOps, identity security, and application security across multinational enterprise environments.

Board & Executive Advisory

Board-level security governance, executive stakeholder engagement, security transformation leadership, and organisational maturity improvement at global scale.

Defence & Government

U.S. DoD and DHS assignments in the United States, Afghanistan, and Africa — operational security, cyber defence, and risk management under mission-critical conditions.