If your main computer died tonight, could you open tomorrow?
Backup, security, and recovery, set up by one person who lives where you do — serving Elizabethtown, Radcliff, and central Kentucky.
Cybersecurity for Small Businesses in Elizabethtown and Central Kentucky
PROTECT · PREVENT · PREPARE
Cybersecurity for small businesses across central Kentucky.
I'm David Martin, and I run Information Security Kentucky. One person, local, working directly with small businesses and sole proprietors across central Kentucky.
Most small businesses assume their backups are working — right up until they try to get something back and find out they aren't. Files sitting in a synced folder isn't the same as being able to recover after a crash or an attack. I make sure the difference doesn't surprise you on the worst day of your year.
No jargon. No scare tactics. No enterprise complexity you don't need. Just someone local who explains things in plain English and answers his own phone.
Who this is for
The business that runs on a computer or two.
The shop, the office, the solo operator — anywhere one or two computers hold everything that matters, and nobody's actual job is keeping them safe. If a big security firm wouldn't return your call because you're "too small," you're exactly who I built this for.
I work with small businesses in any industry. If you want to know what this looks like for a business like yours, I've written up what different industries actually deal with.
What I help with
Backups you can actually count on — and proof that they work
Getting your data back after a crash, a theft, or ransomware
Locking down your accounts, email, and passwords
Two-step sign-in set up properly, so a stolen password alone isn't enough to get in
Ransomware prevention, and real help if it happens anyway
Tightening up your cloud accounts and devices, so forgotten apps and old logins aren't open doors
Watching for your business email or passwords turning up in a known breach — if that happens, you hear it from me first
And none of it is set-it-and-forget-it. Your backups get checked, and you get a plain-language Recovery Status Report — so a quiet failure doesn't sit unnoticed until the day you need it.
What it costs
I publish my prices. Almost every consultant in this field says "call for a quote," and I've never liked that. You should be able to work out whether you can afford me before you talk to me.
Two ways to work together, depending on how your business actually runs.
If your business runs from a phone or tablet
$500 one-time setup · $100 per month
You've got a phone, maybe a laptop, a few cloud accounts, and a calendar full of clients. No server room, no IT setup, no computer at the center of everything. The risks are still real — accounts get hijacked, client lists get stolen, and your reputation takes the hit. But your protection should be sized for how you actually work.
Setup includes:
A full review of your phone, your accounts, your cloud, and any computers you use
Two-step sign-in turned on for every account that matters: email, banking, social media, business apps
A password manager set up, and your passwords moved out of sticky notes, browsers, and Word documents
A cloud account review — which apps have access to what, with anything questionable shut off
A phone security review: lock screen, fingerprint or face unlock, find-my-device, photo backup
Backup set up on your computer or laptop, if you use one
A written one-page security checklist you keep, useful for insurance, audits, and your own records
Every month:
One check-in by text or email — a quick status update, no visit required
Somewhere to send the suspicious email, the strange login alert, the charge you don't recognize
Breach monitoring on your key accounts
Security settings refreshed as platforms and threats change
Backup health monitoring, if backup is part of your setup
If your business runs on a computer
$1,000 one-time setup · $300 per month
If a Windows computer is the heart of your operations — practice management software, donor records, member databases, client files, scheduling — your needs are different. You need real backup. You need to be ready for ransomware. And you need someone who knows what to do when a ransom note shows up on the screen.
Setup includes everything above, plus:
VaultGuard Backup installed and set up — the Windows backup software I built myself, included as part of your service
Three copies of your data, in three different places: one on an encrypted drive at your office, one in your own business cloud account, and one off-site copy that I hold, somewhere your computers can't reach — so if
ransomware gets into your office, it can't follow the backup out the door
Every backup is checked for damage. If a file gets corrupted, you find out from a report, not on the day you need it
Your backup files are locked down so they can't be deleted or damaged by accident — or by ransomware that gets onto the computer
Files are scanned before they go into the backup, so an infection doesn't get saved along with your data
Your backup drive is encrypted, and I confirm it stayed that way
I restore from your backup and show you it worked. Not a green checkmark — an actual recovery, witnessed
Every month:
All three copies of your data monitored
A written health report: what's protected, what was verified, anything I caught
Emergency recovery covered at a flat rate if ransomware or hardware failure hits — see below
Your call goes to me. Not a call center, not a rotating technician
A quarterly review of where you stand and what I'd change
Everything from the monthly service above
Emergencies and one-off work
Some things don't fit into a monthly service. The pricing is straightforward, and active clients pay half.
Emergency response — ransomware, a breach, urgent recovery:
Active client: $250 flat for the first four hours, then $75 per hour
Not a client: $500 flat for the first four hours, then $75 per hour
Active clients also get priority — your call jumps ahead of non-client emergencies. An emergency is the same work whichever service you're on, so the discount is the same either way.
Hourly work — a one-time review before an insurance renewal, help responding to a specific suspicious email, walking a board through a risk:
Active client: $75 per hour
Not a client: $100 per hour
What I do, and what I don't
I do information security, not information technology. Drawing that line is what lets me be genuinely good at the part I do, instead of mediocre at all of it.
What I do:
Backups and data recovery
Account and password security
Two-step sign-in
Ransomware prevention
Cloud account hardening
Phone and device security
Breach monitoring
Incident response
Security reviews
What I don't do:
Printers and scanners
Wi-Fi and networking
New computer setup
Software installation
"My email won't open"
Hardware repair
Slow computer fixes
General technology support
If you call me with a technology problem rather than a security one, I'll point you to a local provider I trust rather than taking the work and doing it badly. I'd rather lose the hour than give you less than my best.
A couple of other things I won't do, because a lot of this industry isn't straight with you:
I don't sell compliance certificates, and I won't tell you my service "makes you compliant." What I do is help you keep good records and point you toward the right questions. If a rule applies to your business, I'll explain it in plain language — I'm not your lawyer and I'm not your auditor.
No long contracts, no fear-mongering, no upselling. Straightforward pricing, and you can leave with 30 days' notice.
How we start
Free 30-minute Data Safety Check. In person, by phone, or by video. An honest look at what's protected right now and what isn't. No pressure, no upsell.
A recommendation. I tell you which of the two fits how your business actually operates. You can start with the smaller one and move up later.
Setup day. One focused session, usually two to four hours. You finish with everything secured, a written checklist in hand, and somewhere to send your questions.
Ongoing. Monthly check-ins and a direct line whenever you need it.
Where I work
I'm based in Hardin County and work in person across central Kentucky — Elizabethtown, Radcliff, Fort Knox, Vine Grove, Bardstown, Leitchfield, Shepherdsville, and the Louisville metro.
For the right client I'll travel two or three hours, which puts most of the state within reach: Bowling Green, Owensboro, Frankfort, Lexington, and the towns in between.
Wherever you are in Kentucky, if you're a small business trying to do right by your data, I can probably help. Local enough that when you call, you're talking to me.
Before we work together
Every engagement runs under a written agreement, and I'd rather you read it than be surprised by it. Here's how I work — the agreement, the 30-day exit, what I'm responsible for and what you are, and what happens to your data when we're done.
Free Data Safety Check
Not sure where you stand? Let's find out.
Thirty minutes, no charge. We'll talk through your current setup, I'll tell you the gaps that worry me most, and you'll get an honest assessment of what you'd actually need — even if that turns out to be "you're in better shape than you thought, you don't need me."
No pressure. No quote pitched at you afterward unless you ask for one. Just a conversation about whether your business could survive losing its data.
Protect. Prevent. Prepare.
Three words. They're on my logo because they're the work. Protect what you have. Prevent what you can. Prepare for what you can't prevent.
Whether you're a one-person operation or a small office, those three words mean the same thing — and they're worth doing right.
David Martin
Information Security Kentucky, LLC
Protect. Prevent. Prepare.
Hardin County, Kentucky