Find out where you stand, before someone else asks.
Maybe your insurer is asking, or a customer. Maybe it's you, after a news story or a near miss. Either way the question is the same, and a risk assessment answers it in writing: what's working, what isn't, and what to fix first.
Two reasons people ask
Most assessments start one of two ways.
-
Someone is asking you
Your insurer, a customer or a regulator wants it in writing. The insurance renewal asks whether two-step sign-in is on and whether the backups have been tested. A bigger customer sends a security questionnaire with a due date. If you hold patient records, HIPAA expects you to know where your risks are and to have written them down.
-
You're asking yourself
You'd rather know than guess. Maybe it was a news story about a business like yours, a fake invoice that nearly got paid, or a partner asking “are we covered?” with nobody quite sure. Maybe someone told you to have us take a look. Nothing is wrong that you know of. You just can't say for certain that nothing is.
“I think so” isn't an answer
Most businesses answer these questions from memory, whether the question arrives on a form or across the desk. Somebody set up the email years ago. Somebody said the backups run every night. The person who knew how it all fit together has moved on. So “I think so” goes on the form as “yes,” and a “yes” that turns out to be wrong does more damage than an honest “no.”
Written down, the same answers become something you can use: a short list of what to fix before it matters, a price you can bring down, a budget you can plan around, and a question you can answer the day it's asked instead of the week after.
What you get, in writing
At the end you get a report about your business, written for whoever has to read it, you or the person asking, not for a technician.
What's already working. Credit where it's due, so the report isn't only bad news.
What we found, rated High, Medium or Low. How likely each problem is, and what it would cost you if it happened.
The fixes, in order. The ones that can't wait come first, and each says what it takes.
Your insurer's questions, answered. Truthfully, with what it would take to turn each “no” into a “yes.”
Every area we checked. Page two goes through all of them, with what we found and what to do about each.
Every business gets the same checks, so a second one, a year on, shows exactly what changed.
Your insurer asks the questions. The assessment answers them.
A cyber insurance application asks who can sign in to what, whether your backups would survive an attack, and whether your staff would spot a fake invoice. The assessment is how you answer those truthfully, instead of from memory. It isn't a test you pass or fail: the insurer is working out how much risk it's taking on, and every answer moves the price or the cover.
Some of our clients bring the questionnaire straight to us, and we go through it with them line by line. Where the honest answer is no, the assessment has already said what it takes to make it yes. If your renewal is coming up, have the assessment done before you fill in the form.
Proving it and being it are different jobs. Keeping your business protected day to day is our Cyber Security service.
An hour or two of your time. The report is on us.
-
One visit, then the report
The first assessment costs nothing. A technician comes to your office, looks things over, writes it up, and walks you through the report so nothing in it is a mystery.
-
Deeper, if you want it
If you'd like us to go further into your Wi-Fi, guest access and the rest of the network, that's a deeper assessment, and we'll say so before we start.
-
The same checks every time
Running it again a year later shows exactly what changed, and gives you something to show anyone who asks.
Questions we get asked
Is the first assessment really free?
Yes. It costs nothing and commits you to nothing. A deeper assessment is a separate job, and you'll know before we start.
Can you tell us whether we're HIPAA compliant?
We can show you where your network and systems fall short of HIPAA's security requirements, and put that in writing. We won't give you a flat yes on HIPAA as a whole, because it covers more than computers: how your office handles patient information day to day is part of it too.
Will you fill in our cyber insurance application?
We'll work through it with you. You answer for your business; we make sure the technical answers are accurate, and the assessment shows what would turn a “no” into a “yes.”
Nothing is wrong that we know of. Is it worth doing?
Yes. That's the best time for one, before a renewal, a contract or a problem forces the question.
We already have an IT provider. Can we still ask?
Yes. A second look before a renewal or a big contract is a good reason to ask.
Is this the same as your Cyber Security service?
No. The assessment shows where you stand and puts it in writing. Cyber Security is the work that keeps you protected every day after that.
How often should it be done?
Once a year, and again when something big changes: a new office, a new system, or a renewal with new questions on it.
Tell us what's prompting it
An insurance renewal, a customer's questionnaire, or simply wanting to know. Tell us what's behind it, and any date you're working to, and we'll start from there.
We're in Greensburg and work with businesses across Westmoreland County and Western PA.
724-838-7526Thank you — we'll be in touch.
A member of our team will reach out within one business day. If it's urgent, call 724-838-7526 and ask for the help desk.