The Cyber Friend

The Cyber Friend is a Michigan-based cybersecurity consultancy serving small and medium businesses nationwide. I founded it in 2021, and today it has my full attention.

The problem I built it around is simple. Real expertise has always been priced for enterprise budgets. A full-time CISO costs $250,000 or more in salary alone, and large managed providers sell packages built for someone else, leaving growing businesses exposed and underserved.

What I do:

CMMC Level 1 and Level 2 consulting for defense contractors and subcontractors, including gap analysis, System Security Plans, POA&Ms, and assessment readiness.

vCISO and fractional CISO engagements on monthly plans, covering risk assessments, compliance guidance, policy development, and ongoing advisory support.

HIPAA Security Rule assessments for healthcare providers and business associates.

Risk assessments built on NIST CSF 2.0, NIST SP 800-171, and NIST SP 800-53, delivered with a prioritized remediation plan.

Vendor risk management, security awareness training, tabletop exercises, and human-reviewed phishing email analysis.

Part of my work comes through managed service providers who bring me in for compliance depth their teams do not carry. I have built out security programs for MSPs directly and delivered CMMC readiness alongside them for their clients.

I hold CISM, CMMC Registered Practitioner, and Registered Practitioner Advanced credentials, as well as CompTIA Security+, plus a master's degree in cybersecurity and information assurance. The Cyber Friend is listed on the Cyber AB Marketplace.

How this works. You work with me directly, month to month, with 30 days' notice to cancel. No sales handoffs, no junior analysts, no rotating consultants. I cap my client load so nobody becomes a number. If a lighter engagement fits your situation better, or your organization is large enough that an agency would genuinely serve you well, I will tell you that before you sign anything.