Cybersecurity and network security for Lompoc businesses

Lompoc is home base

Keith Systems is based in Lompoc, in the 93436 ZIP code that also covers Vandenberg Village and Mission Hills. That ZIP had about 739 business establishments in the last published Census ZIP Business Patterns (2018). Most are small: professional and medical offices, shops, trades, nonprofits and tasting rooms, alongside a district hospital and city offices.

Being local is practical. When something needs attention on site, it is a short drive through the morning fog, not a day trip. Jacob Keith holds the CISSP (ISC2), CompTIA CySA+ and CompTIA SecurityX.

Who does business here: suppliers, wine and everyday offices

Lompoc sits next to Vandenberg Space Force Base, so some local firms are in the defense supply chain. By Census count, aerospace product and parts manufacturing is only a handful of establishments per county. The real supplier pool is small engineering, electronics, machining and services firms that sell to primes, often a tier or two down, with security clauses tucked into purchase order terms.

Wine is the other thread. Census County Business Patterns (2023) counts about 115 wineries in Santa Barbara County, and the Santa Barbara County Vintners put wineries and tasting rooms at about 325 countywide (2024). Lompoc's Wine Ghetto tasting rooms are part of that. Around them is the everyday mix: dental offices, insurance agencies, accountants, churches and property managers.

Example: a six-person machine shop with a CUI drawing

Picture a small Lompoc machining shop that just won a purchase order from a prime. The attached drawings are marked CUI. The owner's laptop, a shop-floor tablet, a networked plotter and the guest Wi-Fi for visiting buyers all share one flat network. Two people send quotes from one email login, and the drawings sit in a shared folder anyone on the network can open.

A readiness engagement usually goes like this:

1. Read the contract and flow-down clauses: is DFARS 252.204-7012 there, and does the work involve Federal Contract Information (FCI), CUI, or both?
2. Map where CUI actually lives: email, the shared folder, laptops, USB drives.
3. Design segmentation so that folder cannot be reached from guest Wi-Fi, the plotter or the tablet.
4. Replace the shared login with individual accounts that use multi-factor authentication.
5. Write a gap list against the 110 requirements in NIST SP 800-171 Rev. 2, the starting point for a System Security Plan.

See CMMC and NIST SP 800-171 readiness and FCI and CUI explained for small suppliers.

Where CMMC stands as of October 2026

On July 13, 2026, DoD announced that CMMC Phase 2, planned for November 10, 2026 with mandatory Level 2 third-party assessments, is suspended pending a review. No replacement date has been announced.

Phase 1 continues: Level 1 and Level 2 self-assessments, with annual affirmations in SPRS. DFARS 252.204-7012 and NIST SP 800-171 Rev. 2 obligations remain in force, so the suspension is not a reason to stop.

This is changing. Check your contract and the DoD CIO CMMC site. Keith Systems provides readiness help only: it is not a C3PAO or a CMMC assessor and does not certify anyone. More: CMMC help for Vandenberg-area suppliers.

Wine Ghetto tasting rooms and the smart stuff on the network

A tasting room is a small network with a lot on it: point-of-sale tablets, a receipt printer, a smart TV, a thermostat, security cameras, a door controller and guest Wi-Fi. Each has an IP address, and the weakest one sets the bar. When guests and point-of-sale share one network, a visitor's compromised phone sits one hop from the payment tablets.

Keith Systems works on the network side only: separating guest, device and business traffic, reviewing firewall rules on the network gear you already own, DNS filtering, and multi-factor authentication on the accounts behind your wine club and online store. Jacob does not log into or manage the devices, does not recommend brands, and sells no equipment.

Selling online? PCI DSS 4.0.1 future-dated requirements have been mandatory since March 31, 2025, including making sure scripts cannot tamper with your payment page. See connected device network security, wineries and agriculture and PCI DSS for tasting room websites.

Free local help, and where Keith Systems fits

The Golden State APEX Accelerator offers free government-contracting counseling to small businesses in Santa Barbara, San Luis Obispo, Ventura and Kern counties. The EDC SBDC, which offers free counseling in Santa Barbara and Ventura counties, hosts a free small-business cybersecurity webinar series from October 1, 2026 to April 7, 2027. Keith Systems is not affiliated with either.

Keith Systems fits when you want someone to review your actual network, accounts and documents and write down what to change. Jacob also reports vulnerabilities through coordinated disclosure on HackerOne (@cratitoes) and through MSRC.

On site in Lompoc, Vandenberg Village, Mission Hills, Buellton, Solvang and across the county; remote anywhere. Book a free security consult or call (805) 800-8163.