IT Compliance Help: HIPAA, FTC Safeguards, PCI and NCUA
IT Compliance Help: HIPAA, FTC Safeguards, PCI and NCUA
IT COMPLIANCE HELP FOR REGULATED BUSINESSES
Many small businesses fall under a security rule without realizing it. Medical and dental offices have HIPAA. Tax preparers, auto dealers that arrange financing and many other financial businesses fall under the FTC Safeguards Rule. Anyone taking cards deals with PCI DSS. Credit unions answer to the NCUA. We turn those rules into working controls and records.
- Risk assessments tied to the systems we manage
- Controls put in place and kept running
- Records ready for auditors, examiners and insurers
WHERE COMPLIANCE GOES WRONG
PAPER PROGRAMS
A policy binder written once and never matched to how systems really work.
NO RISK ASSESSMENT
Most rules start with a written risk assessment that many offices never did.
VENDOR BLIND SPOTS
Software vendors and service providers holding your data with no review.
MISSING RECORDS
Controls in place but no proof when someone asks.
THE RULES WE WORK WITH
HIPAA
Security Rule risk analysis, access controls, encryption, audit logs and business associate tracking for medical, dental and therapy offices.
FTC SAFEGUARDS RULE
Written security program, qualified individual, MFA, encryption and breach notice duties for covered financial businesses.
PCI DSS
Card data environments for retail, restaurants and service businesses that take payments.
NCUA PART 748
Security program and 72-hour cyber incident reporting for federally insured credit unions.
We are not a law firm or auditor. We handle the technical controls and records and work alongside your attorney, auditor or compliance officer.
HOW WE BUILD A COMPLIANCE PROGRAM
01
ASSESS
Inventory systems and data and run the risk assessment.
02
FIX
Put missing controls in place in priority order.
03
DOCUMENT
Write policies that match how things really work.
04
MAINTAIN
Review yearly and after big changes.
RECORDS FROM THE TOOLS WE ALREADY RUN
Patch reports, backup results, MFA coverage, training completion and access reviews come straight from the systems we manage. That makes the evidence current and real.
- Monthly patch and backup reports
- MFA and EDR coverage
- Training completion records
- Quarterly access reviews
INDUSTRIES WE HELP WITH COMPLIANCE
MEDICAL AND DENTAL
HIPAA risk analysis and safeguards.
AUTO DEALERS
FTC Safeguards Rule for dealers that arrange financing.
TAX AND ACCOUNTING
FTC Safeguards and IRS data security plans.
CREDIT UNIONS
NCUA Part 748 and incident reporting.
QUICK ANSWERS
It covers many non-bank financial businesses, including tax preparers, mortgage brokers and auto dealers that arrange financing. Ask your attorney to confirm for your situation.
Yes. We run the technical risk analysis on the systems we manage and give you a prioritized fix list.
We help with the network and device controls around your payment systems. Your payment processor sets which questionnaire you complete.
No. We put controls in place and keep records. Auditors and attorneys give the formal opinions.
Need someone to track compliance items to closure? See our vCIO services.
FIND OUT WHERE YOU STAND
Tell us your industry and what rules you think apply. We will tell you what we would check first.
Or call 717-516-0600
