50-Point Security & Privacy Assessment — One-on-One · In-Person or Virtual
Not a scan. Not a software report. A structured one-on-one assessment where Mike works through your actual digital environment — your passwords, devices, network, backups, vendor relationships, and personal data exposure. Fifty checks. Written findings. Ranked action plan. Plain English throughout.
Mike follows up within one business day to discuss fit and schedule.
The 50 Checks
The assessment covers every significant attack surface a small business faces — from the obvious (reused passwords, unpatched devices) to the overlooked (vendor data-sharing agreements, personal information exposed by data brokers). Fifty checks. Every finding documented. Every risk explained in plain English.
Weak or reused passwords are the single most common entry point for business breaches. This domain covers every credential surface in your business — including ones you may not have thought of.
Every device that touches your business data is a potential entry point. This domain covers computers, phones, tablets, and the software running on them.
Your network is the highway your data travels on. A misconfigured router or an unsecured Wi-Fi network can expose everything connected to it.
Most businesses don't know exactly where their data lives, who has access to it, or what their vendors do with it. This domain maps your data exposure and validates your recovery posture.
Business owners, executives, attorneys, and healthcare professionals are high-value targets. Your personal data — home address, phone number, family relationships, financial information — is likely available to anyone willing to look. This domain maps that exposure and provides concrete steps to reduce it.
Why This Is Different
Automated scanners check what they can reach from the outside. This assessment goes through your actual environment — your accounts, your devices, your vendors — and documents every finding, not just the ones a scanner can detect.
Every check produces a documented finding. Every finding gets a plain-English explanation of the risk, a severity rating, and specific remediation guidance. You leave with a written report you can hand to your IT person, your attorney, or your insurer.
Not every finding is equally urgent. The action plan is ranked by real-world risk, implementation complexity, and business impact — so you know exactly what to fix first and what can wait until next quarter.
Most cybersecurity assessments skip personal privacy exposure entirely. This one doesn't. Your personal data in data broker databases and people-search sites is a real attack surface — especially for business owners and executives.
The report is just the beginning. You get 30 days of follow-up support as you work through the action plan — questions answered, guidance on specific fixes, and a final check-in to confirm your most critical items are resolved.
Mike's background isn't compliance checkbox reviews. It's adversarial assessment — thinking like an attacker to find what's actually exploitable, not what looks good on a report. That perspective is built into every check in this assessment.
How It Works
Mike learns your business before starting the assessment. This session covers your industry, team size, the software and services you rely on, your current security practices, and any specific concerns you already have. The information gathered here shapes how the assessment is conducted and what gets prioritized.
The first assessment session works through Domains 1, 2, and 3 of the 50-check framework. Mike walks through each check with you, documents findings in real time, and flags items that need immediate attention. You participate directly — this isn't a passive scan, it's a guided review of your actual environment.
The second session covers Domains 4 and 5 — data handling and backup posture, vendor security review, and personal privacy exposure. The privacy domain in particular surfaces findings that business owners rarely know about but that represent meaningful personal and business risk.
Mike delivers a written report documenting every check, every finding, and every recommendation. The action plan ranks all findings by priority — critical, high, medium, and low — with plain-English remediation guidance for each. This is a document you can hand to your IT person, your attorney, or your insurance broker.
Is This Right for You?
Book Your Assessment
Submit the form and Mike will follow up within one business day to discuss fit, format, and scheduling. No charge until you've had a conversation and decided to proceed.
Your submission is in Mike's inbox. Expect a response within one business day. If you don't hear back within 24 hours, check your spam folder or call directly at (505) 933-9287.
One email a month. Threats, AI developments, and privacy issues that matter to small business owners — in plain English. No jargon, no vendor pitches.