California small and midsize businesses
Security decisions that fit the business you run.
You may have an IT provider and still need a clear owner for security priorities. I help California business owners and operations leaders define the review, assign responsibilities, and prepare evidence for customer or audit questions.
Questions worth putting on the agenda
- Has a customer asked for evidence of your security controls?
- Which security decisions belong to leadership, and which belong to your IT provider?
- Where should you focus limited staff time before buying another tool?
Experience and perspective
CyberWiz is the solo consulting practice of Lewis Matlock in Yucaipa, California. My enterprise cloud security background and teaching experience inform how I explain systems, access, and decisions. You work directly with me on the agreed scope.
Define the work that fits.
Start with the business services and information involved. A security assessment can establish priorities, fractional CISO work can organize ongoing leadership decisions, and SOC 2 readiness can prepare for an independently performed audit. These services do not replace the operational responsibilities of your provider.
Choose a starting point
Security Assessment
A scoped review of systems, access, and risk, with a plain-language report and prioritized fixes.
Fractional CISO
Monthly security leadership for policy, vendor review, leadership reporting, and incident planning.
SOC 2 Readiness
Gap assessment, policies, controls, and evidence preparation for organizations preparing for a SOC 2 audit.
Before sharing information
Use the first conversation to explain the situation at a high level. The agreed engagement defines what information is needed and how it will be shared.
Start with a conversation
What security question is on your desk?
Tell me what prompted the question. A 20-minute call is a place to establish the next step.