HIPAA
We offer HIPAA compliance training for staff and support the systems and controls behind your risk analysis or audit: encryption, access controls, MFA, logging and backups. Encryption in particular reduces the chance that a lost device becomes a reportable breach.
CMMC
We help defense suppliers prepare for CMMC Level 1 and Level 2 (based on NIST SP 800-171) with a gap review, policies and the security controls. The formal assessment is done by an outside assessor (a C3PAO). We do not certify companies or guarantee results.
FTC Safeguards Rule
The FTC Safeguards Rule applies to most tax preparers and accounting firms that handle customer information, regardless of size. We manage the technical safeguards, such as MFA, encryption, access control and monitoring, that support your written information security program.
Compliance platform add-on
The compliance platform tracks your controls, policies and vendors for each framework you add: CyberStarters, SOC 2, HIPAA, GDPR, ISO 27001 or AI Compliance. Each framework is a separate add-on, priced by number of users, and includes risk management, compliance as code and vendor management standards.
Documentation
Controls are documented in a form auditors, insurers and customer questionnaires can use, and kept current as your systems change.
Sources
- HHS: HIPAA Security Rule
- DoD CIO: CMMC program
- NIST SP 800-171 Rev. 3
- FTC Safeguards Rule, 16 CFR Part 314
- IRS Publication 4557: Safeguarding Taxpayer Data
Information on this page is general and is not legal or compliance advice.