Keith Systems
Cybersecurity services for Central Coast businesses
Seven focused services, one person, all on the network side. Pick the one that matches the question you're actually being asked, whether it comes from an insurer, a prime contractor, a patient or your own gut.
Connected-device network security
The niche: everything with an IP address. Printers, thermostats, smart TVs, tablets, point-of-sale, cameras, door controllers and sensors share your business network and are usually the weakest link. Keith Systems designs network-side separation intended to limit what they can reach, without touching the devices. Connected-device network security
Network security and segmentation
Review of firewall rules, remote access, DNS filtering and backup practices, plus segment design on the network gear you already own. Guest Wi-Fi and device traffic get their own space, and you get written requirements your IT provider can follow. Network security
Security risk assessments
A structured review mapped to NIST CSF 2.0 that covers accounts, email, network design and an external exposure review with written authorization from the owner. Findings are ranked by real risk and delivered as a written work plan. Security assessments
HIPAA security risk analysis
Support preparing the risk analysis required by 45 CFR 164.308(a)(1), built for small dental and medical offices. It covers where patient data lives, who can reach it and what to fix first. It is not legal advice. HIPAA security risk analysis
NIST SP 800-171 and CMMC readiness
Readiness help for small defense suppliers: FCI and CUI scoping, gap review against the 110 requirements of Rev. 2, System Security Plan and POA&M support, and SPRS score preparation. Keith Systems is not a C3PAO and does not certify anyone. CMMC readiness
Incident response readiness and training
A written incident response plan, scenario playbooks, a facilitated tabletop exercise and live staff training on phishing and payment fraud. It covers California's 30-day breach notification timeline too. Incident response readiness
Vulnerability disclosure program setup
A security.txt file, a disclosure policy with good-faith research language, an intake channel and a triage process. It's designed by a researcher who reports through HackerOne and MSRC. VDP setup
Not sure which one fits?
You don't need to know. Call (805) 800-8163 or book a free consult and we'll sort it out together. For the record: Keith Systems is not a licensed contractor, doesn't install, wire or sell equipment (details), isn't a CMMC assessor and doesn't certify anyone, and isn't a law firm.
Questions
Before you call.
Do you sell equipment or recommend products?
No. Keith Systems works on the security of your existing network, accounts, policies and processes. It doesn't sell, supply or resell equipment, and it doesn't recommend products, brands or contractors. When a change is needed, you get written requirements describing what the network has to do, and your team or IT provider decides how to meet them.
Which service should I start with?
Start with the question in front of you. A prime contractor asking about NIST points to CMMC readiness. A patient-data practice usually needs the HIPAA risk analysis. If you have no specific driver, a security risk assessment gives you a ranked list of what matters. The free security consult sorts this out in about 30 minutes.
Do you work on site or remotely?
Both. On-site work covers Santa Barbara County and southern San Luis Obispo County, including Lompoc, Santa Maria, Santa Barbara, Goleta, Solvang, Buellton, Nipomo and Arroyo Grande. Remote work is available anywhere in California and the US, and most reviews and documents work well over video. See the service area for details.
- Connected-device network securityThe smart stuff on your network, from printers and TVs to sensors and point-of-sale, kept on its own segment and out of reach of the business.Read more
- Network securitySegmentation, firewall review, remote access and account hardening on the network you already have.Read more
- Security assessmentsA plain-language risk assessment with findings ranked by real risk and a written work plan.Read more
- NIST 800-171 and CMMC readinessReadiness help for small defense suppliers: scoping, gap assessment, system security plan and POA&M support.Read more
- Incident response and trainingA written response plan, a tabletop exercise, and staff security awareness training.Read more
- HIPAA security risk analysisA written, on-site risk analysis for dental and medical practices, built to sit beside your IT vendor and any risk-analysis tool.Read more
- Vulnerability disclosure program setupsecurity.txt, policy language, intake and triage so researchers know how to reach you.Read more
- Defense suppliers near VandenbergWhat flows down from primes and what to do first, for suppliers in the Lompoc and Santa Maria area.Read more
Not sure if we're a fit? Call (805) 800-8163 or send a message anyway. If it's not something I do, I'll say so and help you figure out where to look.
Start with a free security consult.
A short call to understand your business, what you have to protect, and what to do first. No obligation.