Home | 3 Reasons Consulting | Cyber Security for Healthcare & DoD

Lonetta Canales

Director, Navy BUMED IM&T

As Director and Program Support Specialist at 3 Reasons Consulting, Lonetta brings over 30 years of experience as a Registered Nurse, Health IT Program Manager, and Military Veteran. Specializing in MHS GENESIS operational testing, program management, and team facilitation, she plays a key role in driving project success. Her expertise in Health IT, change management, and operational efficiency makes her a valuable asset to 3RC and its projects within the Military Health System.

A U.S. Navy veteran, Lonetta holds a Bachelor of Science in Nursing and certifications in ITILv3 and PROSCI Change Management.

Donna Poulin

Chief Technology Officer

As Chief Technology Officer at 3 Reasons Consulting, Donna brings over 30 years of experience in Health IT, Data Analytics, Cybersecurity, and Defense Health. With a proven track record of leading multi-billion-dollar IT portfolios and cross-functional teams, she has held senior leadership roles within the Department of Defense, including the Defense Health Agency and U.S. Navy.

Her expertise in aligning cybersecurity, cloud operations, and business analytics with critical objectives drives 3RC’s technological innovation and strategic growth.

A U.S. Navy and Marine Corps veteran, Donna holds a Master’s in Computer Information Systems, a Bachelor of Science in Human Resource Management, and certifications as a PMP and CPHIMS.

Tim Staub

Senior Director, IT Services

As Senior Director of Information Technology Services at 3 Reasons Consulting, Tim leads a team providing cybersecurity policy and business operations support to the Naval Information Warfare Center, Atlantic, and the Defense Health Agency. His team also supports several military medical facilities, including Womack Army Medical Center and Walter Reed National Military Medical Center.

A U.S. Air Force veteran, Tim holds a Master of Science in Management, Information Technology (Cybersecurity concentration), a Bachelor’s in Management/Computer Information Systems, and certifications as a CISSP and CISA.

Hugh Price

Director, Policy and Strategy

As Director of DHA/NIWC Cybersecurity Policy Development and Team Lead at 3 Reasons Consulting, Hugh leads efforts to develop and implement cybersecurity policies for critical defense health systems. He also serves as Director of the BUMED Team, providing strategic guidance and expertise to multiple 3RC clients.

With a strong background in compliance and security, Hugh plays a key role in ensuring that defense health systems remain secure and aligned with industry standards.

Hugh holds a Bachelor’s in Communications and certification as a CCISO.

David Littlejohn

Senior Director, Cybersecurity

As Senior Director of Cybersecurity at 3 Reasons Consulting, David leads a team of experts dedicated to securing military treatment facilities and medical devices worldwide. With 35 years of experience in engineering and cybersecurity, he has played a crucial role in supporting defense health customers.

Prior to joining 3RC, David served as the San Antonio Program Manager for KSH Solutions, leading strategic cybersecurity support for Navy, Army, and Air Force Medicine. He is also an advisory board member for the HHS 405(d) Program, helping strengthen cybersecurity within the health and public health sectors.

A U.S. Air Force veteran, David holds an Associate’s in Information Technology and certifications as a CISSP and Project+.

Craig St. John

Chief Delivery Officer

As Chief Delivery Officer at 3 Reasons Consulting, Craig focuses on enhancing client services and ensuring exceptional project execution. With over 20 years of cybersecurity experience, he has successfully led Department of Defense and Federal Government initiatives, delivering mission-critical solutions with a commitment to excellence.

Known for his hands-on approach to project leadership, Craig plays a vital role in maintaining high standards of customer satisfaction and operational success. His leadership ensures that 3RC continues to meet the evolving needs of its clients with precision and reliability.

Craig holds a Bachelor of Science in Business Administration and certifications as a CISSP and CISA.

Clay Bozard

Chief Innovation and Growth Officer

As Chief Innovation and Growth Officer at 3 Reasons Consulting, Clay leads the company’s strategic expansion, market leadership, and innovation efforts. With over 25 years of experience in healthcare IT, he identifies and implements growth opportunities, ensuring 3RC stays ahead of industry trends.

His expertise spans interoperability, integration, EMR, acute and post-acute care, regulatory compliance, and cybersecurity. Previously, as CIO/CISO at Post Acute Partners, Clay played a key role in scaling the company from 5 facilities with 250 employees to 50 facilities with over 4,000 employees.

A U.S. Army Veteran, Clay holds an MBA in Healthcare Management and a Bachelor of Science in Digital Imaging.

Chris Cotton

President, Chief Strategy Officer

As the co-founder and President of 3 Reasons Consulting, Chris brings over 30 years of experience in Health Information Security and Privacy. He leads the company’s strategic direction, driving innovation and growth while ensuring the successful delivery of solutions.

Chris has been instrumental in pioneering initiatives such as an assess-and-incorporate process for medical devices and an enterprise cybersecurity support model. With deep technical expertise and leadership acumen, he provides strategic guidance to senior leadership, helping organizations navigate complex cybersecurity challenges with confidence.

A U.S. Army Veteran, Chris holds a Master’s in Healthcare Administration, a Bachelor’s in IS Management, and certifications as a CISSP and CPHIMSance for senior leadership, and applying his hands-on technical experience to solve his client’s most difficult challenges.

Jodi Cotton

CEO

As the co-founder and CEO of 3 Reasons Consulting, Jodi oversees all business operations with a hands-on approach, driving the company’s continued expansion. With extensive experience in HR, operations, and strategic growth, she ensures compliance across 10+ states while managing payroll, invoicing, and benefits administration.

A versatile leader, Jodi also advises on business development and represents the company at industry events. Under her leadership, 3RC has earned national recognition, including placements on the INC 5000 and Vets 100 lists as one of the fastest-growing small and veteran-owned businesses in the U.S.

A U.S. Army Veteran, Jodi holds a Master of Science in Teaching and a Bachelor of Applied Science in Resource Management.

Making Cyber Simple

Outstanding CPARS

Enterprise-Level Risk Management Specialists

Healthcare Cybersecurity Experts

Providing Solutions

Established in 2014

Endpoints managed

ATOs obtained

What We Do

Healthcare Information Cybersecurity

Medical Device
Cybersecurity

Risk Management

Regulatory Compliance

Long-Range Technology Recommendations

Program And Project Management Services

Meet our Experts

Jodi Cotton

Chris Cotton

Clay Bozard

Craig St. John

Donna Poulin

David Littlejohn

Hugh Price

Tim Staub

Lonetta Canales

Jodi Cotton

Clay Bozard

Chris Cotton

Craig St. John

Donna Poulin

Hugh Price

David Littlejohn

Tim Staub

Lonetta Canales

Contact Us

Making Cyber Simple

Providing Solutions

Established in 2014

Endpoints managed

ATOs obtained

What We Do

Healthcare Information Cybersecurity

Medical Device Cybersecurity

Risk Management

Regulatory Compliance

Long-Range Technology Recommendations

Program And Project Management Services

Meet our Experts

Jodi Cotton

Chris Cotton

Clay Bozard

Craig St. John

Donna Poulin

David Littlejohn

Hugh Price

Tim Staub

Lonetta Canales

Jodi Cotton

Clay Bozard

Chris Cotton

Craig St. John

Donna Poulin

Hugh Price

David Littlejohn

Tim Staub

Lonetta Canales

Medical Device
Cybersecurity