Services
Strategy and hands-on engineering from one team. You do not need a separate consultant and installer.
vCISO leadership
A named security executive for your firm. Strategy, risk register, board and partner reporting, vendor oversight, and a single accountable contact for insurers, auditors and clients.
Security policy framework
A complete, tailored policy set covering access control, data classification, remote work, vendors, backups, incident response and more. Includes the written information security program the FTC Safeguards Rule requires.
Network security redesign
Segmentation, secure remote access, privileged access management and hardening, planned and implemented with your IT provider, including any network upgrade project already underway.
Annual IT security audit
A structured review of policies, technical controls and compliance status, ending in a prioritized remediation plan. Gold adds technical testing; Platinum aligns the audit to SOC 2.
IT security training
Role-based security awareness for every employee, with phishing simulations and the records you need to show training happened.
Incident response planning and recovery
A written, rehearsed response plan with contacts, decision rights and playbooks. After a breach, we lead recovery and prepare the documentation insurers and regulators ask for.
Regulatory compliance
FTC Safeguards Rule, IRS Publication 4557 and NIST-aligned controls, mapped to what you actually do and kept current as the rules change.
SOC 2 readiness
Gap assessment, control design, evidence collection and auditor coordination for firms whose clients are asking for a SOC 2 report. Platinum plan.
Penetration test coordination
We scope the test, select and manage the testers, and turn their findings into a fix list your team can finish. Platinum plan.
Find out where your firm stands.
A 30-minute call covers your current controls, the rules that apply to you, and what a first 90 days would look like. No cost, no sales deck.