Resources
Read this before you pay anyone.
Each guide tells you what the rule actually requires. Plenty of firms can do the work once they know what "done" looks like. If you get to the end and still want help, that is what the call is for.
Tax & financial firms
FTC Safeguards Rule: the nine required elements, in plain English
What 16 CFR 314.4 actually asks a tax or financial firm to have, what the small-firm exemption covers, and the 30-day breach clock.
Read the guide → PracticesHIPAA risk analysis: what OCR actually looks for
The nine elements OCR expects in a Security Rule risk analysis and the four ways small practices get it wrong.
Read the guide → Defense suppliersCMMC Level 1 self-check: the 15 FAR 52.204-21 requirements
A yes/no walk-through of every Level 1 requirement, written for a shop owner, not an assessor.
Read the guide →