About

Security help for the organizations that need it most, and can least afford to get it wrong.

Mission Assurance Group is an independent security and compliance practice based in Columbus, Ohio, working with mission-driven organizations everywhere.

Taylor LaCass, founder of Mission Assurance Group

Hi, I’m Taylor.

I’ve spent my career in information security, IT audit, and compliance, much of it in regulated industries where getting security wrong has real consequences for real people.

I’ve built security and compliance programs from the ground up, led SOC 2 efforts, run privacy and GDPR work, managed vulnerabilities, and handled security incidents. Before that, I spent years on the audit side, which taught me exactly what reviewers, funders, and insurers look for, and what they don’t care about.

Along the way, I noticed something: the organizations doing some of the most important work, such as nonprofits, foundations, and impact-driven companies, often have the least security support. They hold sensitive data about donors, clients, and communities, but they can’t justify a full-time security leader or an enterprise consulting bill.

I started Mission Assurance Group to close that gap: senior, practical security help, sized and priced for organizations with a mission.

How I work

Principles you can hold me to.

Independent, always

No reselling, no referral fees, no vendor partnerships that shape advice.

Honest over impressive

I’ll tell you what you don’t need, and I’ll never help you overstate your security.

Right-sized

Controls that fit your staff, budget, and risks, not a binder of enterprise policies.

Plain language

If your board can’t follow it, I haven’t done my job.

Transparent pricing

Prices are published, and scope is agreed before any work starts.

Your data, protected

I hold myself to the standards I recommend, and I’ll show you how.

Experience

  • Security and compliance leadership
  • IT audit and assurance
  • SOC 2 program builds and audits
  • GDPR and privacy programs
  • Vulnerability management and incident response
  • Regulated industries, including insurance and legal

Elsewhere

Let’s talk about your mission.

A free, 30-minute conversation, with no pressure and no jargon.

Book a free intro call