California water districts
Security decisions for the people responsible for water.
A water district’s security work has to fit its public service responsibilities, staff capacity, and vendor relationships. I help you establish a clear starting point and turn security questions into decisions you can assign.
Questions worth putting on the agenda
- Which vendors can access important systems, and who approves that access?
- What does leadership need to know before authorizing the next security investment?
- Who coordinates when an incident disrupts the work?
Experience and perspective
I built a nonfunctional turf lookup tool that returns the serving water district, partner water districts, available rebates, and board adoption information for AB 1572 from a property address. A monthly process retrieves water district board minutes and uses AI to analyze updates for the information presented to customers.
Define the work that fits.
Start by defining which administrative, cloud, and vendor systems are in scope. Specialized operational technology work requires its own explicit scope and appropriate expertise.
Choose a starting point
Security Assessment
A scoped review of systems, access, and risk, with a plain-language report and prioritized fixes.
Fractional CISO
Monthly security leadership for policy, vendor review, leadership reporting, and incident planning.
SOC 2 Readiness
Gap assessment, policies, controls, and evidence preparation for organizations preparing for a SOC 2 audit.
Before sharing information
Use the first conversation to explain the situation at a high level. The agreed engagement defines what information is needed and how it will be shared.
Start with a conversation
What security question is on your desk?
Tell me what prompted the question. A 20-minute call is a place to establish the next step.