HIPAA, CMMC, FTC Safeguards, SOC 2: which actually apply to you?
A plain-English guide to telling HIPAA, CMMC, the FTC Safeguards Rule, and SOC 2 apart, who each applies to, and how to know which ones reach your business.
Read More →
Category
Compliance
6 posts in "Compliance"
Does the FTC Safeguards Rule apply to your accounting firm?
A plain-English look at whether the FTC Safeguards Rule applies to your accounting or tax firm, what counts as a financial institution, and what it requires.
Read More →
How to fill out a cyber insurance questionnaire honestly
Honesty on a cyber insurance questionnaire protects your payout. What the tricky questions really mean and how to answer each one without voiding your policy.
Read More →
What is CMMC and do you need it? (subcontractor flow-down explained)
A plain-English guide to what CMMC is, the three certification levels, and how subcontractor flow-down can pull your small business into the requirement.
Read More →
Can an MSP make you compliant? Where responsibility sits
An honest answer to whether an MSP can make you HIPAA or CMMC compliant, what your IT provider really owns, and what stays your responsibility as the business.
Read More →
Does HIPAA apply to my small practice, and what does my IT have to do?
A plain-English look at whether HIPAA applies to your small practice, who counts as a covered entity, and what your IT setup must actually handle.
Read More →