Small Business Compliance

CIS Controls for small business: what they are, why Implementation Group 1 (IG1) is the right baseline, what it covers, and how to start with a prioritized list.

GLBA compliance for small financial businesses: what the law requires, who’s covered, the Safeguards and Privacy Rules, and how to comply with a WISP.

What is a WISP (Written Information Security Plan), and do you need one? Who it’s required for, what goes in it, how to create one, and how to keep it current.

A tabletop exercise is a low-cost way to test your incident response plan. How to plan, run, and capture the lessons for your small business.

Auto shops and dealerships hold payment and financing data criminals want, and ransomware can halt operations. Practical cybersecurity steps and compliance.

Cybersecurity for small manufacturers — why they are targeted, protecting production from downtime, guarding intellectual property, and supply chain risk.

Shadow IT for small business — what it is, the risks of unapproved apps and SaaS sprawl, how to find what your team is using, and how to manage it.

Data privacy laws for small business — CCPA, the wave of US state privacy laws, GDPR basics, who must comply, and practical steps to get compliant.

Wire fraud prevention, email security, and client data protection: the practical cybersecurity steps real estate agents and brokerages need.

POS security, network separation, PCI basics, and staff training: the practical cybersecurity steps every small restaurant needs.