Small Business Compliance

What belongs in an AI acceptable use policy for a small business — data classification, approved tools list, prohibited uses, human review, IP, and incident response.

Cybersecurity for financial advisors and RIAs — Reg S-P, FINRA, and the practical controls small advisories need.

Cybersecurity for small insurance agencies — GLBA, NAIC Model Law, and the practical controls agencies need.

Cybersecurity for veterinary clinics — practice management security, PCI, and backup strategy.

FTC Safeguards Rule explained for small businesses: who’s covered, the required security program elements, penalties, and how to comply with a WISP.

The NIST Cybersecurity Framework explained for small business: what it is, the core functions (Govern, Identify, Protect, Detect, Respond, Recover), and how to use it.

CIS Controls for small business: what they are, why Implementation Group 1 (IG1) is the right baseline, what it covers, and how to start with a prioritized list.

GLBA compliance for small financial businesses: what the law requires, who’s covered, the Safeguards and Privacy Rules, and how to comply with a WISP.

What is a WISP (Written Information Security Plan), and do you need one? Who it’s required for, what goes in it, how to create one, and how to keep it current.

A tabletop exercise is a low-cost way to test your incident response plan. How to plan, run, and capture the lessons for your small business.