Cybersecurity decision support for owner-led small businesses

Plain-language guidance and practical DIY tools to help you make informed decisions.

Explore the Decision Guide Ask about professional services

Cybersecurity knowledge and credentials

Joint Network Attack Certified CompTIA Security+ certification CompTIA ITF+ certification
Cybersecurity clarity for business decision-makers

The Small Business Cybersecurity Decision Guide

For Founders, Owners, and Managers

Understand the basics. Ask better questions. Make informed decisions—without becoming a cybersecurity professional.

You can delegate IT without surrendering ownership, visibility, or control. Whether you manage your own business PC or work with an IT or cybersecurity provider, turn unfamiliar recommendations into clearer questions, priorities, and next steps.

  • Plain-language guidance on accounts, passwords, MFA, devices, firewalls, Wi-Fi, and backups
  • A basic PC hardening checklist for self-managed businesses
  • Provider-conversation questions and a recommendation review worksheet
  • An editable owner workbook and a practical 30-day follow-through plan

$15 USD one-time · one-business license

Buy the Decision Guide — $15

Secure checkout and download delivery through Lemon Squeezy. One ZIP: 14-page PDF guide, editable Word workbook, and license PDF.

Read the Decision Guide terms
Small Business Cybersecurity Decision Guide for founders, owners, and managers, with guide and workbook previews, Edition 1

Start with understanding. Build a program when you are ready. This guide supports everyday decisions and complements qualified professional support. For a fuller self-assessment and documented security program, explore the Business Toolkit. The Decision Guide is sold separately and is not included in the $49 bundle.

Edition 1 (October 2026). Future editions are sold separately; no ongoing updates are promised. Final sale, subject to nonwaivable consumer rights; missing or defective purchased-edition files will be replaced or corrected. Your purchase price paid can be credited once toward a Starter Security Review or Security Essentials Package booked within 90 days. Educational decision support, not a security program, audit, certification, or security or compliance guarantee.

Decision Guide — Full Terms of Use and License

These terms apply to The Small Business Cybersecurity Decision Guide and its accompanying workbook (together, the “Guide”), published by DEFCON2TECH LLC.

1. One-business license

Your purchase grants a non-exclusive, non-transferable license to read, use, and print the Guide for internal use by one business or organization, including its founders, owners, managers, and staff, at all of its locations.

You may complete and adapt the workbook for that business. Your completed worksheets belong to you and may be shared with that business's IT or cybersecurity provider and other professional advisors.

You may not resell, sublicense, publish, or redistribute the Guide or its blank worksheets, or use them to deliver paid services to other businesses, without written permission from DEFCON2TECH LLC.

2. Educational guidance, not a security guarantee

The Guide provides plain-language education and decision support. It is not a complete security program, audit, certification, penetration test, attestation, or legal, regulatory, financial, or insurance advice. It does not guarantee security, compliance, or protection from an incident.

It complements appropriate IT and cybersecurity support, rather than replacing it. Obtain qualified help for changes that could interrupt work, remove access, or affect shared systems, and for specific legal, contractual, or insurance requirements. You are responsible for deciding how to apply the Guide and for the results of changes you make.

3. No warranty and limitation of liability

The Guide is provided “as is”. To the fullest extent permitted by law, DEFCON2TECH LLC disclaims warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. DEFCON2TECH LLC is not liable for indirect, incidental, special, consequential, or punitive damages, or loss of data, money, or business arising from use of the Guide. Its total liability relating to the Guide will not exceed the amount you paid for it. Some jurisdictions do not allow certain limitations, so some of these may not apply.

4. Dated edition

This is Edition 1, dated October 2026. Technology, threats, service settings, and regulations change. Your purchase includes this edition only; no ongoing updates are promised. Future editions, if published, are sold separately.

5. Digital sales and replacement copies

All sales are final, subject to consumer rights that cannot be waived. If a file is missing, damaged, or will not open, contact DEFCON2TECH LLC for a working replacement or corrected file from the purchased edition. Nothing in these Terms limits nonwaivable consumer protection rights.

6. Credit toward professional services

The purchase price paid for the Guide will be credited once toward a DEFCON2TECH Starter Security Review or Security Essentials Package booked within 90 days of purchase. Provide your order reference when booking. The credit has no cash value, cannot be combined with other credits, and applies once per order.

7. Contact

DEFCON2TECH LLC — contact us.

A practical path from understanding to action

Understand the basics | Assess your current practices | Take practical next steps

01

Starter package robot illustration

Start with the Decision Guide

Learn plain-language fundamentals, work through practical checks, and prepare questions for yourself or your IT and cybersecurity provider.

Explore the Decision Guide

02

OSINT robot illustration

Assess and document your practices

Use the Small Business Security Program Toolkit when you are ready for a broader, structured self-assessment, working baseline, and practical improvement plan.

Compare the DIY security kits

03

Security Essentials robot illustration

Decide what support you need

Share completed worksheets with your provider, ask for evidence behind recommendations, and seek qualified help for complex or disruptive changes.

Explore professional services
Practical tools. Your security. Your pace.

Do-It-Yourself Security Kits

Plain-language guides and working templates to help households and small businesses build and maintain their own security practices. No subscription and no technical background required for the household kit.

Buy securely through Lemon Squeezy, which handles checkout, receipt emails, and download delivery. Choose a kit below to continue to its hosted checkout.

Household Digital Safety Kit: guide, family charter, account worksheet, and emergency plan, Edition 1

For households

Household Digital Safety Kit

$19 one-time

A practical, step-by-step plan to protect your family's accounts, devices, money, and identity.

  • 11-step household safety guide
  • Printable family safety charter
  • Account and device tracking worksheet
  • “I Think I've Been Hacked” response plan

PDF guides and editable documents · U.S.-focused

Buy Household Kit — $19
Small Business Security Program Toolkit: guides, policies, risk spreadsheets, and roadmap, Edition 1

For small businesses

Small Business Security Program Toolkit

$39 one-business license

A guided self-assessment to document your security baseline, prioritize risk, and organize a practical 90-day improvement plan. Its 30-safeguard baseline maps to CIS Controls v8.1 IG1; it is not a certification or audit and does not by itself meet specific regulatory requirements.

  • Seven-phase program guide and 30-safeguard baseline
  • Risk register and baseline checklist spreadsheets
  • Prioritized remediation roadmap
  • Adaptable policies, response plan, and worked examples

PDF, editable Word documents, and spreadsheets

Buy Business Toolkit — $39
Household and Business Bundle with both complete digital security kits, Edition 1

Save $9 · both kits

Household + Business Bundle

$49 one-time

Both complete kits for business owners who want to improve security at work and at home.

  • Everything in the Household Digital Safety Kit
  • Everything in the Small Business Security Program Toolkit
  • One household license and one business license

One ZIP containing both complete Edition 1 kits

Buy Both Kits — $49

Digital product terms: Edition 1 (October 2026); later editions are sold separately. All sales are final. If a file is missing or will not open, contact us for a working replacement copy of the same edition. The purchase price will be credited toward a Starter Security Review or Security Essentials Package booked within 90 days. These kits are educational self-assessment tools, not legal advice, an audit, a certification, or a guarantee of security or compliance. Expand the section below to read the full Terms of Use and License.

CIS Controls is a trademark of the Center for Internet Security, Inc., which has not reviewed or endorsed these products.

Full Terms of Use and License

1. License

When you purchase a Kit, DEFCON2TECH LLC grants you a non-exclusive, non-transferable license to use, print, and edit its contents. The Household Kit is for the members of one household. The Small Business Toolkit is for internal use by one business or organization, including its employees and contractors, at all of its locations. You may fill in, adapt, and rename the templates and policies for your own use, and your completed documents belong to you. You may share completed documents with your auditors, insurers, customers, and advisors. You may not resell, sublicense, publish, or redistribute a Kit or its blank templates, or use a Kit to deliver paid services to other people or businesses, without written permission from DEFCON2TECH LLC.

2. What a Kit is—and is not

A Kit is educational material and a self-assessment framework. It is not legal, regulatory, financial, or insurance advice; an audit, certification, penetration test, or attestation; or a guarantee that you are secure, compliant, or protected from any incident. Only an authorized independent auditor, assessor, or regulator can determine whether an organization meets a specific standard or law. If you are subject to laws or contracts that impose security requirements (for example, health, payment card, financial, or government contracts), consult a qualified professional about those requirements. You are responsible for deciding how to apply the Kit to your situation and for the results of any changes you make to your systems.

3. No warranty and limitation of liability

The Kit is provided "as is". To the fullest extent permitted by law, DEFCON2TECH LLC disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement, and is not liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of data, money, or business, arising from use of the Kit. DEFCON2TECH LLC's total liability relating to a Kit will not exceed the amount you paid for it. Some jurisdictions do not allow certain limitations, so some of these may not apply to you.

4. Edition and accuracy

The Kit is a dated edition, like a reference book. This is Edition 1, dated October 2026, and it reflects generally accepted practices as of that date. Technology, threats, provider settings, and regulations change after publication. Your purchase includes this edition only; DEFCON2TECH may publish later editions, which are sold separately.

5. All sales final

Because the Kit is a digital download that can be read and copied as soon as it is delivered, all sales are final and no refunds are given. If a file is missing, damaged, or will not open, contact us and we will send a working replacement copy of the same edition. Nothing in these Terms limits any rights you have under consumer protection laws that cannot be waived.

6. Credit toward professional services

The price paid for a Kit (or, for a Bundle, the Bundle price) will be credited toward a DEFCON2TECH Starter Security Review or a Security Essentials Package booked within 90 days of the purchase. Provide your order reference when booking. The credit has no cash value, cannot be combined with other credits, and applies once per order.

7. Contact

DEFCON2TECH LLC · Contact us · dc2tech.com

Practical support when you need it

Professional cybersecurity support

Our planned remote, advisory-only services are designed to help owner-led small businesses understand external risks, clarify priorities, and plan practical next steps—while complementing, not replacing, an existing IT provider.

Areas where we can help:

  • External Vulnerability Assessments
  • Identify public-facing system risks without touching internal devices.
  • Security Awareness Training
  • Practical training to reduce human-driven security incidents.
  • vCISO Advisory
  • Strategic guidance for teams that need a security leader.
  • Adversarial OSINT & DueDiligence
  • Understand your exposure from an attackers perspective.
  • Security Policy Development
  • Clear, policies aligned with CISSP best practices.
  • Compliance Readiness Assessments
  • Prepare for SOC2, ISO 27001, CSF, HIPAA, and more.
  • Incident Response Planning
  • Build a simple, effective plan before disaster strikes.

Who we help:

  • Small Businesses
  • Small businesses without a security team.
  • Start-ups & Entrepreneurs
  • Founders who need guidance, not complexity.
  • Businesses in Tech-regulated Industries
  • Organizations preparing for compliance.
  • Organizations Requiring Actionable Advice
  • Teams who want to reduce risk quickly.
  • Managers and Leadership Mitigating Risks
  • Leaders who want clear, actionable steps.

Not sure what kind of support fits? Start a conversation and share what you are trying to understand or improve.

Professional support services

These service packages are in development and are not yet available for booking.

Starter Security Review

$299 - $499

A fast, clear snapshot of your current security posture.

Includes:

  • External vulnerability scan
  • OSINT exposure report
  • Policy & compliance gap review
  • Prioritized recommendations
  • Executive summary

Perfect for first-time clients.

Security Essentials Package

$799 - $1499

A structured foundation for small businesses.

Includes:

  • Everything in Starter Review
  • Security policy development
  • Security awareness training
  • SaaS security posture review
  • 30-day advisory support

Establish a hardened foundation.

vCISO Advisory

$299 - $999

Ongoing guidance and development.

Includes:

  • Monthly risk reviews
  • Policy updates
  • Vendor risk assessments
  • Compliance readiness
  • Incident response planning
  • Executive reporting

Your security program - managed simply.

Adversarial OSINT & Due Diligence

$699 - $699

A deep look at public-facing risk.

Includes:

  • Executive OSINT profiles
  • Company footprint analysis
  • Dark web credential checks
  • Vendor due diligence
  • Social media exposure review

Ideal for hiring, partnerships and executive protection.

Starter package robot

Starter package!

Situational awareness

Security Essentials robot

Security Essentials

Asset protection

vCISO advisory robot

Advisory

Expert support

OSINT robot

OSINT

Intelligence drives operations

Verify & securely communicate with me

How it works:

All official emails and documents from this consultancy are digitally signed using GPG (OpenPGP) on a hardware-backed YubiKey 5C NFC security key. This provides integrity, authentication, and non-repudiation, as outlined in our Security & Cryptographic Trust Policy. Private keys are generated offline and stored exclusively on the hardware key — they never exist on any computer.
Public Key Credentials:
  1. OpenPGP Key (YubiKey 5C NFC — ed25519 / cv25519):
    1. Key ID: 0x6E275BDCE48592A4
    2. Fingerprint: 28D3 0F0C 13D6 0050 5A6D 3EB1 6E27 5BDC E485 92A4
    3. Identity: DefCon2Tech LLC. (DefCon2Tech Secure Communications.) <secure@dc2tech.com>
    4. Download: dc2tech-pubkey.asc
    5. SHA-256 of dc2tech-pubkey.asc: dffee48397e12231f40852ab90950e1145f4dcc74932d1104b28292f63ed9030
  2. Public Key (copy & paste):
  3. -----BEGIN PGP PUBLIC KEY BLOCK-----
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=aKZH
-----END PGP PUBLIC KEY BLOCK-----
  1. Verify My Signature
    • To confirm a message or file is authentic:
        1. Download and import the public key

          2. gpg --import dc2tech-pubkey.asc

        2. Confirm the fingerprint through an independent trusted channel

          3. gpg --fingerprint 0x6E275BDCE48592A4

        3. Confirm the fingerprint matches exactly (this is the critical step — compare every character):

          4. gpg --verify document.txt.sig document.txt

      1. A “Good signature” result with the matching fingerprint confirms the message is authentic and unmodified.
  2. Send Me an Encrypted Message
    • For sensitive communication, use the dedicated secure mailbox:
    • secure@dc2tech.com
    • We use GPG (OpenPGP) with a hardware-backed YubiKey. After importing and verifying my public key, you can encrypt directly to it.
    • Encrypt your message:
      1. Save your secret text as message.txt
      2. Encrypt it to my key:
      3. gpg --encrypt --armor --recipient 0x6E275BDCE48592A4 message.txt
      4. Email the resulting message.txt.asc file to the address above.
    • To receive an encrypted response, include your own public key inside the message body (or attach it). We will encrypt our response to your key, ensuring an entirely secure, closed-loop conversation.
  3. First-Contact Encrypted Email Template
    • Use this for your initial secure message:
    • Subject: Encrypted First Contact
    • Hello,
    • This is my first encrypted message. Im reaching
    • out regarding a potential engagement and
    • wanted to begin communication securely.
    • Summary of Inquiry:
    • - [Brief description]
    • - [Relevant context]
    • - [Preferred next steps]
    • My Public Key for Your Encrypted Response: [Paste your GPG/OpenPGP public key here]
    • Please confirm receipt and feel free to reply with
    • an encrypted message.
    • Thank you.
  4. High-Trust Verification
    • For engagements requiring elevated assurance, Out-of-Band verification is available upon request.
    • This allows you to confirm my fingerprint through a separate trusted channel.

Read or download our Information Security Policy, Privacy Notice, and Responsible Disclosure Policy.

Get to know us

Our approach is simple:

Practical, CISSP-aligned guidance for small businesses is clarity, not complexity.

Honest, effective security advice.

  1. Understand your risks
  2. Explain them clearly
  3. Provide actionable steps
  4. Keep everything lightweight and transparent
  5. No scare tactics.
  6. No unnecessary tools.
  7. No intrusive access.

Background:

Founded by a CISSP-trained, Security+ certified professional with a focus on:

  • Zero-trust principles
  • Real-world risk reduction
  • Clear communication
  • Privacy-first thinking

We help you build a strong security foundation- one step at a time.

Driven by passion:

Founders profile picture

Regis Arlandus Johnson Sr.

I didnt take the traditional path into cybersecurity. My background spans small-business operations, IT support, and a series of experiences that taught me firsthand how fragile trust can be in the digital world. Those moments- the kind most people only see in movies- shaped the way I approach security today: with precision, skepticism, and a zero-trust mindset. I focus on advisory-only cybersecurity services that help small businesses understand their risks without adding unnecessary complexity. My work is grounded in Security+, CISSP-aligned study, and a practical understanding of how real-world threats unfold. I specialize in external vulnerability assessments, adversarial OSINT, and policy-driven security architecture that organizations can actually use. Every official communication I send is GPG-signed with a hardware-backed key — not as a gimmick, but because integrity and verification matter. I believe security should be transparent, verifiable, and simple enough to be adopted consistently. If your organization needs clear guidance, a structured security foundation, or help understanding its threat landscape, I bring a perspective shaped by both technical training and real-world experience- the kind that doesnt fit neatly into a résumé, but makes all the difference when it comes to protecting what matters.

King of No Nation, Hand of God book cover

Those moments—the kind most people only see in movies—are chronicled in full in my autobiography, King of No Nation, Hand of God.

🔒 100% anonymous support — no account, no email, no tracking required.

Support the Author Get Reviewer's Copy

Have a cybersecurity question?

Tell us what you are trying to understand or improve. The service packages shown above are still in development and are not open for booking. Choose “Not sure - help me choose” if you have a question or want to ask about future availability.