IT compliance.
For Managed IT customers: meet the requirements your industry, insurers and customers expect, with the technical side solid and documented.
Anyone who promises you complianceis guessing.
We make the technical side solid and documented. The rest is your policies and behavior, and we will say so.
Who does what.
We do
The technical side.
- A risk assessment of where your technology and data are exposed.
- Security and access controls matched to your requirements.
- IT and security policies drafted and maintained.
- Training records and audit evidence, kept up to date.
You do
The part no provider can do for you.
- Follow the policies day to day.
- Decide how your business handles client information.
- Tell us what applies to you, and we will scope it.
Auditors do
The formal sign-off.
- Carry out certification audits independently.
- We prepare you and support the audit.
If you handle sensitive client information, an insurer or customer has sent you a security questionnaire, or a bigger customer expects proof that you are secure, this is for you. It comes with Managed IT.
Questions about compliance.
What kind of compliance do you help with?
We cover general IT security and compliance: cyber insurance questionnaires, customer security reviews and good-practice controls. We do not provide industry-specific compliance such as HIPAA or financial regulation. Tell us what you are being asked for and we will tell you what we can support.
Do you write our policies?
We help draft and maintain the IT and security policies you need, based on how your business works.
How often is it reviewed?
Regularly. Requirements and environments change. We revisit controls and evidence on a schedule.