Security rules, regulations and cyber insurance
What the law, your industry, your clients and your insurer expect of your business's security, in plain English: Florida's breach law, HIPAA, PCI, the FTC Safeguards Rule, the Florida Bar, client security questionnaires and insurance applications.
Florida's data breach law: what a small firm must do, and by when
Florida's data breach law in plain English: what counts as a breach, the 30-day deadline, who must be told, the penalties, and how to be ready.
Read articleProtecting policyholder data at an insurance agency
An agency holds personal, financial and sometimes health details for every client. Here is where that information is exposed and what to put in place.
Read articleThe FTC Safeguards Rule for CPA and tax firms: a plain-English checklist
What the FTC Safeguards Rule requires of accounting and tax practices, what small firms are exempt from, the 30-day breach report, and a checklist.
Read articleWhat the Florida Bar expects of your firm's technology and security
The rules and ethics opinions that set a Florida lawyer's duties on technology, confidentiality, cloud, vendors and AI, with a checklist for partners.
Read articleWhy your cyber insurance premium jumped, and what brings it down
Why cyber insurance renewals come back higher, the controls underwriters price on, the one answer that can void a claim, and a plan before renewal.
Read articleYour client's security team will ask about yours
Large companies now treat their consultants as part of their own security risk. Here is why, what they'll ask, and how a small consultancy gets ready.
Read articleWhat cyber insurers ask, and how to be ready
Cyber insurance applications are now security audits. The questions businesses are asked, what each is checking, and how to answer with evidence.
Read articleHow to answer a client security questionnaire
Corporate clients increasingly send their law firms, accountants and consultants a security questionnaire. Here is how to answer one honestly and keep the work.
Read articleThe written information security plan: what tax preparers need to know
What a written information security plan (WISP) is, why tax and accounting practices are expected to have one, and what goes in it.
Read article
Find out where your business is exposed. Free.
Thirty minutes, no access to your systems, and you keep your Fix-First List whether or not you hire us.
We take on a limited number of new clients each month, so every setup gets the attention it needs.