SoCal Privacy Consultants is a boutique privacy and security consulting firm serving SMBs across the U.S. since 2008. We help organizations establish and operationalize Privacy and Security Programs that are sustainable, defensible, and trustworthy. Services include: • Data Mapping and Data Governance (since 2013) • Risk Assessments • Compliance with HIPAA, ISO 27001-2:2022 and CIS Controls v.8 • Policy Templates and assisting with its customization and operationalization • Governance with clearly defined roles and responsibilities • Practical education and guidance • Privacy/Security-by-Design consulting: products/services, processes, systems and technologies Clients include private and public organizations across many different industries, including SMBs. SoCal Privacy uses a risk-based approach and provides an effective transfer of knowledge during assessments. For an FTC consent order client, SoCal Privacy established multi-state information security programs and provides ongoing consulting - resulting in five consecutive satisfactory audits certifying compliance to the order.