Public agencies
A security plan your agency can put to work.
Public agency leaders need to explain security decisions to people with different responsibilities. I connect the technical findings to the work that needs an owner, a decision, or a documented process.
Questions worth putting on the agenda
- Can your existing staff and providers explain who owns each security decision?
- Are vendor security questions recorded before access is approved?
- Can leadership see which risks need a decision and which actions are in progress?
Experience and perspective
My practice is based in Yucaipa in Southern California’s Inland Empire. I bring enterprise cloud security experience and a teaching approach to explaining systems, access, and risk.
Define the work that fits.
A useful engagement starts with the agency’s actual questions. Existing policies, procurement requirements, and internal approvals shape the scope; they are not replaced by a generic checklist.
Choose a starting point
Security Assessment
A scoped review of systems, access, and risk, with a plain-language report and prioritized fixes.
Fractional CISO
Monthly security leadership for policy, vendor review, leadership reporting, and incident planning.
SOC 2 Readiness
Gap assessment, policies, controls, and evidence preparation for organizations preparing for a SOC 2 audit.
Before sharing information
Use the first conversation to explain the situation at a high level. The agreed engagement defines what information is needed and how it will be shared.
Start with a conversation
What security question is on your desk?
Tell me what prompted the question. A 20-minute call is a place to establish the next step.