I know of two companies in California that will help you assess security risks, design and implement a safeguards program, and select service providers that can maintain appropriate safeguards.  Feel free to ask me.

Did you find somebody?

@SibiloBooks