Start with geography: shortlist providers within a reasonable drive, such as Datalink Networks for the Santa Clarita Valley, IT Support LA or CMIT Solutions around Calabasas, CyberDuo and AllSafe IT for Glendale, Burbank and Pasadena, Advanced Networks on the Westside, Be Structured and Crimson IT downtown, Boom Logic in northeast Los Angeles and Fantastic IT in the South Bay. Then match specialties: entertainment companies should talk to CyberDuo or AllSafe IT, law and accounting firms to IT Support LA, and defense suppliers working toward CMMC to Boom Logic or Advanced Networks. Before signing, ask each finalist where your backups are stored, how often restores are tested, and how quickly it can bring your team back online from another location if your office is closed by fire, an earthquake or a power cut.
Does California’s privacy law apply to my business?
The California Consumer Privacy Act, as amended by the CPRA, applies to for-profit businesses that do business in California and meet any one of three tests: annual gross revenue of $26.625 million or more (the threshold since January 1, 2025), buying, selling or sharing the personal information of 100,000 or more California residents or households, or earning at least half of annual revenue from selling or sharing personal information. Regulations that took effect on January 1, 2026, add cybersecurity audits for businesses whose data processing poses a significant risk, such as those handling large volumes of personal or sensitive information, with the first audit certifications due April 1, 2028, for businesses with more than $100 million in revenue, April 1, 2029, for those with $50 million to $100 million, and April 1, 2030, for smaller ones; they also require risk assessments for certain processing.
How quickly must a California business report a data breach?
Since January 1, 2026, under a 2025 amendment known as SB 446, a business must notify affected California residents within 30 calendar days of discovering or being told about a breach of their personal information, unless law enforcement asks for a delay. If more than 500 Californians are affected, it must also send a sample copy of the notice to the Attorney General within 15 calendar days of notifying them. Good logging and monitoring from your IT provider make it possible to work out quickly what was exposed and meet those deadlines.
What did the January 2025 wildfires teach Los Angeles businesses about IT?
The Palisades and Eaton fires burned more than 37,000 acres combined, according to CAL FIRE, and destroyed more than 16,000 structures. A business whose only backup sits in the same building as its servers can lose both at once, while one with cloud or off-site backups and a documented recovery plan can keep working from home or a temporary space. Ask your provider for off-site, tamper-resistant backups, a written recovery plan with target recovery times, and a test restore at least once a year.