Most small businesses don't know what they're exposed to until it's too late. I help you find the gaps, understand what they mean, and know exactly what to do about them in plain language, without the jargon.
I'm a cybersecurity professional with a CISSP certification and years of hands-on experience helping organizations identify and address their real security risks, not just the theoretical ones.
Before launching this consulting practice, I spent years in cybersecurity and risk management roles at institutions including UCLA, the Department of Defense, Consolidated Edison, and Semtech, giving me firsthand experience with the threats, controls, and compliance requirements that organizations of all sizes face.
What that background taught me is that most business owners aren't ignoring cybersecurity because they don't care. They're overwhelmed by technical language, unsure where to start, and skeptical of price tags without a clear understanding of the resulting benefits. That's exactly why I do this differently.
I've worked with small law firms, therapy practices, and other professional service businesses that handle sensitive client data every day. I'll give you a clear picture of where you stand, written in plain English, with honest recommendations you can actually act on.
Three clear options, without hidden upsells. Every engagement starts with a free 30-minute consultation to make sure we're a good fit.
A focused assessment of your most common and critical exposure points. Ideal for businesses that want to start somewhere real without overwhelming their budget.
A thorough assessment for businesses that handle sensitive client information including practices with HIPAA obligations or attorney-client confidentiality requirements.
A full-scope engagement with an executive-ready deliverable. Ideal for firms with compliance obligations or client confidentiality at the core of their business.
A sample of feedback from businesses I've worked with.
"We had no idea how exposed our client files were. Eric walked us through everything in terms we actually understood, and the report he gave us was something we could hand directly to our IT person and take action on."
"As a therapist in private practice, I was worried about HIPAA and didn't know where to start. Eric made the whole process comfortable, identified a few things I needed to fix immediately, and helped me understand why they mattered."
"I expected this to feel like being lectured by an IT person. Instead it felt like getting advice from a trusted colleague. Eric is thorough, clear, and genuinely invested in protecting your business."
More testimonials coming soon. Please reach out if you'd like to be featured after your assessment.
No pressure, no sales pitch. We'll talk about your business, what you handle, and where your biggest concerns are. From there, I'll recommend whether an assessment makes sense for you, and which one.
Most business owners leave that first call with a clearer picture of their situation than they've ever had before. That alone is worth 30 minutes.
Your information is kept strictly confidential and never shared.
Thanks for reaching out. I'll get back to you within one business day.