Insights
Security & IT guidance for regulated firms.
Practical, field-tested guidance on cybersecurity, managed IT, and compliance — written for the legal, healthcare, and financial firms we serve across Los Angeles.
Attorney-Client Privilege in the Cloud: Securing Microsoft 365 for Law Firms
Moving matters to Microsoft 365 does not waive privilege — but a misconfigured tenant can. The controls that keep confidential client data confidential.
5 min read
Cyber InsuranceWhat Cyber Insurers Now Require Before They'll Renew Your Policy
Renewal questionnaires have turned into control audits. The five requirements that decide your premium — and whether you're covered at all.
4 min read
RansomwareSurviving a Ransomware Audit: What Regulators Actually Look For
After an incident, your insurer and regulator both want evidence — not intentions. Here is the control evidence that survives scrutiny.
4 min read
HIPAAHIPAA and Microsoft 365: The Configuration Checklist Most Practices Miss
A signed BAA is the start, not the finish. Here are the M365 settings that move a practice from 'covered' to 'compliant.'
5 min read
Reg S-PReg S-P for the 15-Person RIA: What Actually Changed
The amended Safeguards Rule applies regardless of headcount. A pragmatic path for small advisory firms.
4 min read