Services
Three rulebooks. One person who knows all of them.
Wirsing Security does governance and compliance, not helpdesk. Every engagement starts with the same question: what does the rule that applies to you actually require, and what is the shortest honest path to meeting it?
01 / Start here
Which one is you?
Three regulated audiences, three programs. Each page tells you exactly what the rule requires, what it costs, and what I do about it.
I run a tax, accounting, or advisory firm
You need a WISP and a Qualified Individual. The IRS and FTC both expect it.
FTC Safeguards Rule (16 CFR Part 314) · IRS Publication 4557
See the program vCISOI run a medical, dental, or financial practice
You need a HIPAA or Reg S-P program and someone to answer the insurer.
HIPAA Security Rule (45 CFR Part 164) · HIPAA Breach Notification Rule
See the program CMMC ReadinessI supply a defense prime
You need an honest SPRS score and an SSP a C3PAO will accept.
CMMC 2.0 (32 CFR Part 170) · NIST SP 800-171 Rev. 2
See the programNot sure where you fit?
Baseline Security Assessment
A two-week, CISSP-led review of your environment, policies, and legal obligations. You get a written findings report, a prioritized fix list, and a straight answer on which package, if any, you actually need.
Fully credited toward any package you start within 90 days.
$1,500
Start with an assessment03 / How it works
Assess. Build. Run.
Same three steps for every program. The only thing that changes is which rulebook we are working from.
- 01
Assess
A 20-minute call, then a two-week baseline assessment. You get a written findings report and a straight answer on what you actually need. If the answer is "not much," I will say so.
- 02
Build
The risk assessment, the written plan, the policies, the incident response plan, and a short fix list with owners and dates. I coordinate the technical work with your existing IT provider.
- 03
Run
I stay on as your named security lead: Qualified Individual, vCISO, or compliance owner. Quarterly or monthly cadence, annual reporting, exam and audit support, and a phone that gets answered.