IT Compliance Support: HIPAA, PCI and Cyber Insurance
Medical, dental, legal and financial offices face security requirements from regulators, insurers and clients. We set up the technical safeguards and keep the evidence you will need to show.
What IT Compliance includes
Risk assessment support
We review your systems and identify gaps in security controls, backups, access and encryption.
Technical safeguards
Encryption, multi-factor authentication, patching, endpoint protection and access controls on your computers and servers.
Backup and recovery
Tested, encrypted backups and a recovery plan that matches your needs.
Cyber insurance readiness
Help meeting the controls insurers ask about, such as MFA, endpoint protection, backups and email security.
Policies and documentation
Help assembling the security records you need, with your attorney or compliance advisor reviewing the legal wording.
Staff training
Security awareness training with records that show who completed it.
What we do and what we do not do
We handle the technology side of compliance: configuring, monitoring and documenting your systems. We are not a law firm or an auditor, and legal interpretation of HIPAA, PCI or your contracts should come from your attorney or compliance advisor. We work with them.
Common questions
What IT controls does HIPAA require?
The HIPAA Security Rule expects safeguards such as access controls, audit logging, encryption where reasonable, backups, risk analysis and workforce training. We implement the technical pieces and document them. Your attorney or compliance advisor interprets the legal requirements.
Can you help us qualify for cyber insurance or lower renewal premiums?
We help you put in place the controls insurers ask for, such as MFA, endpoint detection, tested backups and email security, and we can help fill out the technical sections of an application.
Do you help with PCI compliance for card payments?
We help secure networks and devices that handle card data, such as firewalls, segmented Wi-Fi and patching. Your payment processor defines the exact questionnaire.
Do you sign business associate agreements?
Ask us directly. We will confirm what we can sign for your engagement.
How often should we review our security?
At least once a year, and any time you add systems, move offices or change vendors.
Related services
Industries we serve
On-site across greater Houston
Let’s see where your IT stands.
A free, no-pressure assessment of your network, security, backups and Microsoft 365, with a clear written plan.