Compliance
Rules you can follow Proof you can show
Programs aligned with NERC CIP, NIST CSF, CIS and more. We set them up with you, maintain them on a schedule and keep the evidence ready for review.
How our programs work
Most programs start with a project to set things up, then continue on a schedule.
Find your program
Programs any organization can use, and programs built around the rules of your industry.
Showing all 9 programs.
For any organization
CIS Controls v8.1 Compliance Program
We check your security against the CIS Controls, close the gaps in planned steps and keep the evidence current.
- For
- Any organization that wants a widely used set of security basics to build on
- Based on
- CIS Critical Security Controls v8.1
NIST Cybersecurity Framework Compliance Program
We measure how mature your security is across the framework's six areas, set targets with you and track progress every quarter.
- For
- Organizations that want a recognized way to plan, measure and report on security
- Based on
- NIST Cybersecurity Framework (CSF) 2.0
Data Breach Readiness Program
We map the personal data you hold and the state breach laws that may apply, and build a response plan your team has practiced.
- For
- Any organization that keeps personal information about customers or employees
- Based on
- Florida Statutes 501.171 and the breach notice laws of every state
Cyber Insurance Readiness Program
Before each renewal, we check your controls against what your insurer asks, gather the evidence and help you answer the questionnaire.
- For
- Organizations that buy or renew cyber insurance
- Based on
- Your insurer's security requirements and questionnaire
For your industry
NERC CIP IT-Scoped Governance Program
We map your IT controls to NERC CIP requirements, document how security is governed and keep the evidence ready for review.
- For
- Critical infrastructure organizations connected to electric utilities
- Based on
- NERC CIP Reliability Standards, IT-scoped
HIPAA Security Rule Compliance Program
A yearly risk analysis, written safeguards and policies, and evidence kept current for the systems that hold patient data.
- For
- Health centers, clinics and the businesses that handle patient data for them
- Based on
- HIPAA Security Rule
FERPA and CIPA Compliance Program
We help protect student records, set up and review web filtering, and keep the CIPA records your school needs for E-rate.
- For
- Public and private K-12 schools
- Based on
- FERPA for schools with U.S. Department of Education funds, CIPA for schools with E-rate
FTC Safeguards Rule Compliance Program
A written risk assessment, the safeguards and testing the rule requires, and the Written Information Security Plan (WISP) tax professionals are required to keep.
- For
- Accounting firms, tax preparers and other non-bank financial businesses
- Based on
- FTC Safeguards Rule and IRS guidance for tax professionals
Law Firm Confidentiality Program
Protections for client information, secure ways to share files with clients, vendor reviews, staff training and a breach response plan.
- For
- Law firms and legal practices
- Based on
- Florida Bar Rule 4-1.6(e) and ABA Model Rule 1.6(c)
What we do, What stays with you
CyberBlip
- Assess your controls and find the gaps
- Write and update your policies
- Close the gaps or guide your team through the fixes
- Collect, organize and keep the evidence
- Report progress and what to fix next
You
- Decide the scope and approve the plan and policies
- Make the business and risk decisions
- Name a person inside to own the program
- Review the evidence and confirm your answers
- Bring in your lawyer or insurance broker when needed
Next step
Find out where you stand
Tell us how we can best support you.
Icons: Tabler Icons, MIT License. License text: /licenses/tabler-icons.txt