Services Offered
Risk Assessments
We help an organization or individual understand and manage their cyber risk; including identifying and mitigating potential risk factors. Sources may include industry, digital footprint, or business procedure.
CISA CPGs
Cyber Performance Goals (CPGs) set by the Cybersecurity and Infrastructure Security Agency (CISA) are the leading example for secure business practices and prevention against cyber attacks.
Security Program Support
A variety of frameworks are available for application to your organization; including CIS, NIST 800-171, HIPAA, and FERPA.

Expectations for Water Districts & Public Entities
Critical infrastructure entities, such as local water districts, fall within the assessment scope. To ensure clarity and safety during our engagements, please note our operational boundaries:
- The clinic's services are purely advisory and non-technical.
- Assessments rely entirely on client interviews, self-attestations, and document reviews.
- Clinic personnel will never request access to live production environments, handle credentials, or exploit vulnerabilities.
- Deliverables are advisory and must contain no "audit opinion" language or legal certifications of compliance.
