Compliance and cyber insurance
Regulators and insurers increasingly ask the same thing: show us the controls. We put the technical safeguards in place, collect evidence as we go, and work alongside your compliance officer or attorney so audits and renewals aren't a scramble.
What’s included
- HIPAA
- Risk assessments, access controls, audit logging, encryption and business associate agreements for medical, dental and behavioral health practices.
- PCI DSS
- Network segmentation and scanning for businesses that take card payments, so the systems in scope stay few and auditable.
- FTC Safeguards Rule
- The technical controls behind the written information security program required of tax preparers, mortgage brokers, auto dealers and other covered firms.
- Florida Information Protection Act
- Breach readiness for a law that requires notifying affected Floridians within 30 days of determining that personal information was breached.
- Cyber insurance
- Answers to technical questionnaires, evidence of MFA, EDR and backups, and support during a claim.
- Policies and evidence
- Acceptable use, access control and incident response policies written for your business, with the logs and reports to back them up.
A good fit if
- An auditor, insurer or client asked for documentation you don't have.
- You handle protected health information, card payments or tax records.
Questions we hear
Can you make us compliant?
Compliance is shared. We implement and document the technical safeguards; your organization owns its policies, training and legal decisions, and we help with each of them. We aren't a law firm and work alongside your counsel.
Will you work with our auditor?
Yes. We prepare evidence ahead of time and join audit calls to answer technical questions directly.
Find out where your IT stands
Start with a 30-minute call. We'll ask what's working, what isn't, and tell you plainly whether we can help.