Cybersecurity compliance, done for you
If you handle tax returns, financial records, patient information or government contract data, you’re required to protect it, and to prove it in writing. I work with you to set up the protection, write the policies, train your staff, and serve as your Security Officer, so you can get back to your clients.
Who this is for
Tax preparers, bookkeepers and accountants
Healthcare, mental health and medical billing practices
Financial advisors and insurance agents
Law firms
Government contractors
Nonprofits that handle sensitive data
What you get
A Security Officer by contract. I take the role the rules require, and you keep every decision.
Full risk assessment and a documented inventory of your devices, software, vendors, and who has access to sensitive information.
Signature-ready policies built to the strictest rule that applies to you: WISP, Incident Response, Data Breach, Acceptable Use, BYOD, Website Privacy, AI Use, and a guided continuity and recovery plan.
PCI DSS self-assessment (SAQ) filled out for you.
Vendor management: a simple process for you to check and keep watch on the security of every vendor that handles your sensitive data, with Business Associate Agreements in place for HIPAA.
Secure Worksuite with Google Workspace or Microsoft 365 setup.
24/7 monitoring of your computers and phones by a Security Operations Center.
Device hardening and secure setup for computers, phones and Wi‑Fi.
Vulnerability scanning and fixes, plus weekly external scans of your domain, email and SSL.
Website, domain and email protection, Cloudflare included.
Staff training through my online awareness course, plus an employee onboarding and offboarding checklist.
Cyber insurance readiness guidance.
Incident response guidance and an after-action review.
An annual review that keeps your policies matched to how you actually work.
Regulations governing you
Not sure which apply to you? See which rules apply to your business.
Packages to fit your needs
Compliance: everything listed above.
Compliance Plus: adds HIPAA Privacy Rule, SOC 2, ISO 27001, GDPR or CMMC Level 2 work, plus an annual penetration test.
Compliance Documentation (with your MSP): your IT company keeps running your security tools, and I handle the paperwork.
What clients say
-
“Todd has set my business up to be secure, and I should have done it years ago! I know my data, my client's financial data, and my processes are secure. We do bookkeeping, payroll and business advisory, so we have access to clients' financial data. It's got to be secure! And Cyber Security 4 Biz has done that for us! I sleep better at night knowing that the hardware and data are protected. Thanks Todd! And thanks to Jessica for recommending him to us!”
Mindy Morrison, Back Office People – QuickBooks Experts
-
“I met Todd when I was having issues with another IT provider. Todd has been an absolute lifesaver. He corrected the issues and created an excellent secure platform for myself and my employees to operate. He is kind, understanding and very personable and I would highly recommend him to anyone.”
Brita Scott, Brita’s Bookkeeping
Common questions
Do I need a WISP if I'm a solo tax preparer?
Yes. The FTC Safeguards Rule applies to tax preparers of any size, and the IRS asks you to confirm you have a data security plan when you renew your PTIN.
Will you sign a BAA?
Yes. I sign a Business Associate Agreement with every HIPAA client.
I already have an IT company. Can you still help?
Yes. I work alongside your MSP, and your policies name their tools, not mine.
What does a Security Officer do?
HIPAA and the FTC Safeguards Rule require one named person to be responsible for your security program. I fill that role by contract, track what's due, and keep the paperwork current. You keep all decision authority.
Ready to get compliant?
Tell me about your business and I'll show you what you need. Book a Free Consultation.