Know what needs attention first.
A scoped review of systems, access, and risk, with a plain-language report and prioritized fixes.
Explore Security AssessmentConsulting services
Security consulting: assessment, leadership, and SOC 2 readiness.
For California businesses and public-purpose organizations, start with the problem you need to resolve. Each engagement has a named deliverable, an agreed scope, and a clear next step.
Security consulting offers
Security leadership that fits your organization.
Monthly security leadership for policy, vendor review, leadership reporting, and incident planning.
Explore Fractional CISOPrepare the evidence before the audit.
Gap assessment, policies, controls, and evidence preparation for organizations preparing for a SOC 2 audit.
Explore SOC 2 ReadinessA place to begin
Which service fits the situation?
Choose an assessment to understand current risks, a fractional chief information security officer (CISO) for ongoing leadership, or System and Organization Controls 2 (SOC 2) readiness to prepare for an independent audit.
On a small screen, scroll the table horizontally to read the scope boundaries. Keyboard users can focus the table and use the arrow keys.
| Your question | Starting point | What you receive | Scope boundary |
|---|---|---|---|
| Where are the gaps, and what should happen first? | Security Assessment | A scoped review and prioritized report. | Remediation and penetration testing are not implied. |
| Who will keep security decisions moving each month? | Fractional CISO | Monthly policy work, vendor review, leadership reporting, and incident planning. | Round-the-clock monitoring and emergency response are not implied. |
| How do I prepare for a requested SOC 2 audit? | SOC 2 Readiness | Gap assessment, policies, controls, and evidence preparation. | The independent auditor performs the audit. No audit result is guaranteed. |
Not sure which applies? Bring the question to the call. A service name does not need to be your starting point.
Start with a conversation
What security question is on your desk?
Tell me what prompted the question. A 20-minute call is a place to establish the next step.