Areas of Practice


Business Operations

Inefficient or amateur business operations practices can unintentionally mislead founders about the health of their business or result in strategic errors.

Within weeks, we can help you gain a clear, unbiased view of your company’s health and deliver a growth roadmap to your team.


Cybersecurity

Data breaches at large companies garner headlines, but in reality, small businesses are more vulnerable to attacks, and their consequences.

Our team can quickly assess your security posture and make recommendations to immediately reduce risk.

  • SOC 2 Type 1 and Type 2

  • Vendor security review

  • Vulnerability scanning

  • CVE scanning and remediation

  • Security policies

  • Physical office security

  • Anti-malware, anti-virus, and encryption

  • Access management, provisioning, deprovisioning

  • Cloud data and proprietary software security

  • SIG-Lite

  • Cybersecurity training

  • Social engineering risk management


Procurement is so much more than approving purchase orders; it is a full lifecycle.

Our team can guide you through setting up a full procure-to-pay policy and process, implementing vendor selection and management, best practices and more.

Whether you are looking to improve visibility with spend, reduce costs or prepare for governance needs such as SOX Compliance, we are here to help.

  • Cost management

  • Staffing and headcount planning

  • Structuring your books (accounting)

  • Budget to actual implementation

  • COGs / Cost of Sales analysis

  • Sales and commissions strategy

  • Employee culture and incentives

  • Assessment of people management

  • I.T. and technology strategy

  • Pricing strategy analysis

  • Cost of acquisition (CAC), customer lifetime value (LTV), and unit profitability analysis

  • Ops and Support team assessments

Procurement

  • Commitment authorization

  • Delegation of authority

  • Approval process

  • Vendor security review

  • Integration with accounts payable process

  • SOX compliance

  • Vendor negotiation

  • Vendor selection process

  • Vendor data management

  • Vendor portal automation

  • License management

  • Renewal management


Compliance

Our passion is turning compliance into a competitive advantage - not just a cost center. Nimble compliance practices can keep your company at the head of the pack.

Centralized systems administration is key to sustainable growth.

Automation and integrations that enable workflow efficiency can give you the edge needed to win contracts and enable product innovation.

Information Technology

  • SOC 2 Type 1 and Type 2

  • SOX (Sarbanes-Oxley)

  • CCPA / CPRA (California consumer privacy laws and similar laws in other states)

  • GDPR (European privacy regulation)

  • Risk management frameworks

  • IT Compliance / IT General Controls

  • System administration

  • Help Desk / on-call

  • Office networking

  • Remote system management

  • Endpoint management

  • Inventory management

  • Onboarding / offboarding protocols

  • User authentication including central authentication and security/permission groups

  • IT automation

  • Call center and telephony