Plain-language guides to the security questions that show up with a deadline attached: insurance applications, customer questionnaires, contracts, and the regulations behind them. Written by Tanner Harrison, CISSP.
Three minutes, the controls carriers ask about, and an honest read on which answers would hold up at claim time.
GuideMFA, EDR, backups, incident response: what each question really asks, what a defensible yes looks like, and what evidence to keep.
GuideSIG, SIG Lite, CAIQ, HECVAT, and custom spreadsheets. How buyers score them and how to answer honestly when you are partial.
PricingRetainers, one-time assessments, and fixed-fee sprints compared, with real price ranges and what drives them.
GuideWho owns which part of security, where conflicts of interest hide, and when you do not need a vCISO at all.
RegulationWho it covers (far beyond healthcare), consent and policy requirements, enforcement, and a practical checklist.
RegulationFor lenders, auto dealers, tax preparers, and other financial institutions: the required program elements and a checklist.
BlogShorter posts on what we are seeing across Washington and Idaho businesses.
Send it to us. One questionnaire, insurance application, or contract exhibit, answered in ten business days for a fixed $3,500.