Industries

We speak your industry’s security language

Every industry has its own regulators, customer demands, and favorite attacks. Here’s where we spend most of our time, and what we typically help with.

HIPAAHITRUST-ready

Healthcare & health services

Clinics, specialty practices, labs, billing companies, and health-tech vendors all carry the same burden: patient data is valuable to attackers, and the HIPAA Security Rule expects a documented risk analysis, not just a firewall.

  • HIPAA Security Risk Analysis and remediation plan
  • Business-associate and vendor oversight
  • Ransomware readiness for clinical operations
  • Policies and workforce training that auditors accept
CMMCNIST 800-171

Defense contractors & manufacturing

If you’re in the defense supply chain, CMMC now decides whether you keep winning contracts. And every manufacturer has a plant floor that was never designed with cybersecurity in mind.

  • CMMC Level 1 & 2 gap assessment and SSP/POA&M
  • CUI scoping to keep compliance costs down
  • OT network segmentation and plant-floor risk
  • Supplier and flow-down requirements
OT / ICSIT/OT convergence

Energy, oil & gas, and industrial services

Houston is home, and energy runs through our experience, including enterprise IT/OT strategy at a Fortune 500 energy company. From operators to oilfield service companies, we understand field operations, SCADA, and what happens when IT and OT networks meet.

  • OT/ICS security assessments (we teach this at the college level)
  • Remote-access and third-party connection control
  • Operator customer security requirements
  • Incident plans that account for safety and uptime
SOC 2ISO 27001ISO 42001

SaaS & technology companies

Enterprise buyers won’t sign without a SOC 2 report and a clean security questionnaire. We’ve built these programs from scratch and led them as a sitting CISO, including AI governance.

  • SOC 2 Type I → Type II roadmap and auditor selection
  • ISO 27001 and ISO 42001 (AI management) readiness
  • Security questionnaires that stop stalling deals
  • Cloud security across AWS and Azure
Ransomware resiliencePartner access

Logistics, distribution & financial services

When systems stop, trucks stop and money stops moving. These companies depend on partners, portals, and payment flows that attackers love to abuse.

  • Business continuity for operations that can’t go down
  • Partner portal and EDI access control
  • Payment-fraud and business-email-compromise defenses
  • FTC Safeguards Rule and GLBA alignment for financial firms

Don’t see your industry?

The fundamentals transfer. If you handle sensitive data or your customers ask security questions, let’s talk.

Book a free consult
Book a free 30-minute consult