Who I Work With
Small businesses across central Kentucky.
I work with one kind of customer — small businesses. The industry doesn't matter much. The size does.
My only real requirement: you're small — measured in computers, not people.
If your whole business lives on a computer or two, we'll probably get along. That might mean a sole proprietor with one laptop, a five-person office with a machine at the front desk, or a twenty-person shop where everything still runs through the computer in the back room. Headcount doesn't matter much. What matters is that your important files live somewhere you could point to — and that nobody on staff wakes up thinking about information security. Even if you have an IT person, keeping computers running and keeping data safe are different jobs, and I do the second one.
I don't work with enterprises — not because I can't, but because they have IT departments, procurement processes, and dedicated security vendors. They don't really need what I do.
You probably do.
The list below isn't exhaustive. It's a sample of the kinds of businesses I focus on, with notes on what tends to be specific about each — the rules you have to follow, the software your business runs on, and the kind of data you can't afford to lose. If your business isn't on this list, that almost certainly means I haven't worked with you yet — not that I won't. Get in touch and we'll figure out whether what I do is a fit for what you need.
Cybersecurity for Churches & Religious Organizations
Churches sit in an awkward spot. They handle real money — weekly giving, online donations, capital campaigns — and real personal information about members and their families. But most operate with volunteer staff, donated computers, and a budget that answers to the congregation.
What I focus on for churches:
Member data protection — giving records, prayer lists, contact directories. Encrypted backups so a stolen laptop doesn't become a privacy breach.
Donation security — keeping online giving and bookkeeping systems out of attackers' hands.
Pastor and staff email — guarding against the scams that target churches specifically. Gift card requests and fake prayer needs sent from spoofed pastor accounts are a constant threat.
Sermon and service recording archives — backed up so years of work aren't lost to a single drive failure.
Affordable pricing that respects the fact that money given to your church should fund your mission, not an IT bill.
Cybersecurity for Dental & Medical Offices
Dental and small medical practices are a known favorite target for ransomware crews. Patient records carry real value, practices generally have insurance, and a few days of downtime puts enormous pressure on the office to pay quickly. The result: small practices get hit constantly.
What I bring to a practice:
Backup and security built around HIPAA's requirements — encrypted, off-site, and documented so you have records to show when someone asks.
Practice management protection — Dentrix, Eaglesoft, Open Dental, Curve, and similar systems backed up correctly. The practice management software is the practice.
Imaging archive backup — X-rays and intraoral images are huge files. They need a backup strategy built for that volume. Imaging archives are also where a lot of backup software quietly gives up — I wrote about what Windows' own backup does and doesn't save.
Email security for patient communications — The email a hygienist sends about an appointment shouldn't be the weak link in your compliance posture.
Business Associate Agreements — HIPAA requires one from any vendor who touches patient data, and asking for it is a quick way to find out who's serious. Bring it up during your free Data Safety Check and we'll work out what needs to be in place before I touch anything.
Data Protection for Funeral Homes
Funeral homes carry data that's deeply personal — pre-need contracts, family histories, insurance assignments, vital records. Losing it is unthinkable. Having it stolen is worse.
How I help:
Long-term records protection — Kentucky requires funeral records be retained for years. Your backup strategy has to outlast hard drives.
Pre-need contract security — these contain financial and beneficiary information that has to stay locked down.
Vital records account security — the state registry logins you rely on every week, protected with strong authentication.
Email and online obituary management — because a hacked email account that sends fake invoices to grieving families is a reputational disaster you don't recover from quickly.
Continuity planning so a computer failure on a Saturday morning doesn't cancel a Sunday service.
Cybersecurity for Self-Storage Facilities
Self-storage has quietly become a technology business. Gate access codes, motion-detecting cameras, online payment portals, lien processing, automated billing — most of it networked, much of it cloud-based, and all of it a target.
What I focus on:
Management software protection — storEDGE, SiteLink, and similar platforms backed up and monitored.
Footage archive backup — so the recording you need still exists when an insurance claim or law enforcement asks for it.
Gate and camera account security — the online dashboards that control your gates and cameras, locked down with strong logins and two-factor, so a guessed password doesn't open every unit you manage.
Customer payment data — PCI considerations, even if you're using a payment processor.
Lien and auction records — kept in compliance with Kentucky law, with audit-ready backups.
Cybersecurity for Law Firms
Law firms run on confidentiality. The Kentucky Rules of Professional Conduct require attorneys to take reasonable steps to protect client information, and that obligation increasingly means real cybersecurity infrastructure — not just a locked file cabinet.
How I help:
Client file protection — encrypted backup of practice management systems. (Clio, MyCase, PracticePanther, Smokeball, and others)
Email security — wire fraud through compromised attorney email is one of the most common and devastating attacks against law firms. Wire fraud almost always starts in an inbox. Here's what to do in the first hour when a business email is compromised.
Document retention — Kentucky's record retention requirements vary by practice area; your backup strategy needs to match.
Conflict checks and matter records preserved against drive failure.
Full-disk encryption for traveling laptops — a stolen laptop stays a hardware loss instead of a confidentiality breach.
Cybersecurity for Accounting & Tax Offices
Accountants and tax preparers handle financial data the IRS itself cares about. The IRS requires written information security plans (WISPs) for tax professionals, and every January there's a wave of phishing attacks targeting CPAs and EAs specifically.
What I focus on:
Tax software backup — Drake, Lacerte, ProSeries, UltraTax, and similar systems backed up correctly.
Multi-year client records retention — IRS retention rules require keeping returns and supporting documents for years, sometimes decades for specific cases.
Client portal security — if you're sharing returns electronically, the portal is a target.
Tax-season uptime — your backup and recovery strategy should assume the system has to come back fast in February through April, not whenever it's convenient. "Fast" is the part most people never test. How do you know your backup actually works?
WISP support — helping you build and maintain the written information security plan the IRS expects.
Cybersecurity for Sole Proprietors & Small Retail
Maybe you're a contractor running QuickBooks on a single laptop. Maybe you're a consultant whose entire business is a Gmail inbox and a Google Drive. Maybe you run a small retail shop with a point-of-sale system and a back-office computer. Whatever you do, your business runs on data — and right now, the only thing standing between you and losing all of it is hope.
A one-person business has just as much to lose as a fifty-person one — sometimes more, because there's no one else to catch what you miss.
How I help:
Right-sized solutions — you don't need an enterprise security stack. You need backups, common sense, and someone to call when something feels wrong.
Affordable pricing that fits a one-person budget — you're not subsidizing some Fortune 500 contract.
Plain-English explanations — I'll never make you feel dumb for asking questions about your own business.
Setup that just works — once your systems are configured properly, they should mostly run themselves. If you'd rather start smaller than a service agreement, VaultGuard Backup is the software I use with clients, and there's a free trial.
If your business is you and a laptop, that's fine. Let's make sure the laptop is protected.
Every Other Kind of Small Business
The list above is a sample, not a limit. I'm just as glad to work with small businesses in:
Construction and trades
Restaurants and food service
Real estate offices
Insurance agencies
Photography and creative studios
Daycares and small schools
Veterinary offices
Auto repair and mechanics
Salons and small wellness practices
Nonprofits of every shape
Anyone running a small business out of an office, a home, or a truck
What I Won't Do
For the sake of being honest about it:
I won't take on enterprise clients. I'm one person. Big organizations need teams of people, formal SLAs, and dedicated account managers — none of which I can provide. If you're an enterprise, I'm not for you.
I won't pretend to be a compliance auditor. I help you build the technical infrastructure compliance frameworks require, but for formal HIPAA audits, PCI assessments, or SOC 2 work, I'll point you to specialists.
I won't help you pay a ransom. If you've been hit by ransomware, I'll help you recover from backups. I won't negotiate with criminals on your behalf or facilitate a payment.
I won't sell you something you don't need. If your free 30-minute Data Safety Check ends with "you're in better shape than you thought," that's how the call ends.
If you're a small business in central Kentucky and you've ever lain awake wondering whether your data is actually protected, get in touch. We can have a conversation, no pressure, and figure out whether what I do is a fit for what you need.
Book a free Data Safety Check →
Protect. Prevent. Prepare.