Cybersecurity audits
Find your real risks and get a plan to fix them.
A structured review of identity and access, email, devices, cloud apps, backups, and vendor access. You get findings ranked by risk and a remediation roadmap you can follow.
20 years securing and automating business systems.
CISSP-certified
01Protect
Cybersecurity
Find the gaps, fix what matters most, and respond when something goes wrong.
SOC 2 readiness
Get ready for the report your customers ask for.
Gap assessment against the Trust Services Criteria, policy and control buildout, evidence collection, and auditor preparation. An independent CPA firm performs the audit itself.
Policies & security awareness
Policies people follow, training that sticks, contracts you can keep.
Security policies that match how you actually operate, and awareness training that helps your team spot phishing and handle data safely. Plus a review of the security terms in customer agreements, so you only promise what you can deliver.
Managed EDR & incident response
Watch every device. Respond when something gets through.
Endpoint detection and response deployed, tuned, and monitored across your devices. When something gets through: understand what happened, contain it, and fix what allowed it.
02Automate
AI automation
Find the work worth automating, set clear rules for AI, and build tools that fit.
AI governance
Clear rules for which AI tools to use, and how.
Decide which AI tools are approved, what data can go into them, and who reviews the output. Clear policy and staff guidance so adoption can move forward safely.
AI automation strategy
Find the work worth automating, ranked by value and risk.
Map where your team's time goes, identify the workflows worth automating, and rank them by value, effort, and risk. AI where it fits, simpler fixes where it doesn't.
Custom AI tools
Assistants and tools built on your own data and systems.
Internal tools and assistants built on the systems you already use: search your own documents, draft and summarize, and answer questions from your data, with access controls designed in.
Workflow automation & integrations
Connect your apps and automate the handoffs between them.
Connect the apps you already use and automate the handoffs between them: intake, routing, recurring reports, and data entry, with human review where it matters.
Starting points
Sound familiar?
Each of these is a good place to start a conversation.
About
Work directly with the person doing the work.
I've spent 20 years securing and automating business systems, first as a security engineer in Microsoft environments and now running information security programs. Tabor Point brings that experience straight to your business: I assess, plan, and do the hands-on work myself.
I'd still rather read a config than a vendor deck.
- 20 yearsSecurity & automation
- CISSPCertified security professional
- Hands-onAssessment through implementation
FAQ
Good to know
Do you perform the SOC 2 audit?
No. SOC 2 reports are issued by independent CPA firms. Tabor Point prepares you for that audit and can coordinate with the auditor you choose.
Can you help if something has already happened?
Yes: understand what happened, contain it, and fix what allowed it. Availability for new incidents isn't guaranteed, so ongoing clients agree escalation paths in advance.
Is contract review legal advice?
No. It's a technical review of the security commitments in your agreements against what your environment actually does. It works best alongside your attorney.
Will our data be used to train AI models?
Not without your say. Vendor terms, data retention, and training settings are checked for every tool we recommend or build on.
Is AI always part of the solution?
No. Sometimes a simple integration or a better process is the right answer. AI is used where it fits.
We already have an IT provider. Can you work together?
Yes. Tabor Point focuses on security, compliance, and AI work and coordinates with your existing provider.
Contact
Tell us what you're working on
A short summary of where things stand today is enough to start.