What an independent cybersecurity assessment includes
How a bounded security assessment differs from managed IT, what management should receive, and why the review can proceed with the existing IT provider.
Read the guideGuides for professional firms
Plain-language explanations of cybersecurity assessments, written information security plans, and the difference between a vulnerability review and penetration testing. These guides are not legal advice.
-
-
What accounting and tax firms need in a WISP
What the IRS and the FTC Safeguards Rule actually say about a Written Information Security Plan, what a template does not do, and how the plan relates to technical safeguards.
Read the guide -
Vulnerability assessment versus penetration testing
Why a vulnerability review and an authorized penetration test are different scopes, and which one is included in Mojave’s baseline assessment.
Read the guide
Looking for defense or CMMC material? See Guides, Articles, and the defense practice.