Security consulting
Make security
legible.
Founder-led advisory, evidence ready for review, and reporting that leadership and auditors can use.
AdvisoryEvidenceReporting
Fig. 01Practice mark
Services
What we do
Three engagements. Each one is scoped to the decision in front of you.
-
01
Security advisory
Founder-led guidance. Priorities, tradeoffs, and a recommendation leadership can act on.
-
02
Audit & evidence readiness
A record reviewers can examine: scope, control evidence, gaps, and the limit of what that evidence proves.
-
03
Security reporting
Clear technical writing for leadership and reviewers. Findings, impact, uncertainty, and the next step.
Engagements
How an engagement works
A short path from the question to a brief someone else can question.
-
01
Name the decision
What has to be decided, who will read the work, and when it is due.
-
02
Set the scope
Which systems, controls, or questions are in, and what the written work will answer.
-
03
Do the work
Advisory sessions, an evidence review, a written report, or a mix matched to the question.
-
04
Deliver the brief
The judgment, the support for it, and the questions that remain open.
Who we are
Founder-led, on purpose.
North Star Security is the consulting practice of Travis Sanchez. The person who agrees the scope is the person who does the work and signs the brief.
Advisory, evidence, and reporting, delivered as a document a board, an auditor, or a customer can use.
- M.S. Cybersecurity
- CRISC (ISACA)
- CISM (ISACA)
- Founder
Contact
Write to the practice.
A short note is enough. Include the decision, who the work is for, and the date it has to meet.