Concierge IT for Business
Someone wants proof.
Your insurer, an auditor, or a client wants proof of MFA and tested backups, and there's a date on it.
Let's talk Or call 863-594-1141
Thirty minutes. No slides. If we are not the right fit, we will say so.
Pedro, Bill or Leah listens first and sets things up. After that, your own small team, the same people every time.
$125 per person, per month 5.0 on Google · 59 reviews on our Orlando profile Since 1995 SOC 2 Type II audited
What you might be thinking.
“We probably answered that form too hopefully.”
Many firms do. What matters is what you can show now, and what you change before the next one.
“We'd have to switch IT companies to get this.”
Not to talk it through. Thirty minutes on the form, and you know where you stand.
“There's no way we make the date.”
Often there is. Call with the date, and you will get an honest answer.
Who might be asking
- Your cyber insurerAt renewal, or after a claim. A form on MFA, backups, updates and training, and sometimes a scan of your network from outside.
- A big clientA vendor security questionnaire before they sign or renew: how you protect the information they send you.
- Your auditorFor a financial audit or a client's SOC report: who can get in, how access is controlled, and how changes are tracked.
- A rule you work underHIPAA for health information, the FTC Safeguards Rule for tax preparers and many financial firms, CJIS for anyone handling police records.
- A buyer or a lenderIn due diligence: who owns the systems, where the data lives, and what has gone wrong before.
- Your own owners or boardAfter a scam at a firm nearby, a plain answer to: are we protected, and how do we know?
What they usually ask for
The forms differ. The questions are close to the same. Most want to see:
- MFA, a second step at sign-in, on email, remote access and every admin account.
- Backups kept apart from your network, and a restore you have tested.
- Updates: how fast they go on, and who checks.
- Protection on every computer, watched by someone.
- Training, so your people can spot a fake invoice or a fake sign-in page.
- A written plan for what happens if something goes wrong.
Answer what is true. A form answered too hopefully can come back at claim time. The Cyber Insurance Renewal Guide walks through the questions.
Proof should be what good security leaves behind
Not a checklist you fill in the week it is due. The work is done all year, so when the form arrives the answers are already written down: the settings, the reports, the restore tests.
Protected Trust is SOC 2 Type II audited, and the report is yours to read under a confidentiality agreement. When your work is regulated (HIPAA, the FTC Safeguards Rule, a WISP, CJIS), an add-on, Security + Compliance, brings the policies and the paperwork, for $30 more a person.
This form, and every one after it
- Get through this oneThirty minutes on the form with us: where you stand, and what it takes to answer it truthfully.
- Have it ready every yearThe work is done all year by the same people, so next year's form is already answered when it arrives.
How it starts
Nothing changes until you have said yes.
- Thirty minutes with a real person. Tell us what is going on. You leave with an answer, whether or not it is us.
- A plan and a price, in writing. What we found, what we would do first, and what it costs.
- Then the same people take it from there. Your own small team, who know your office. One of them is the person you call.
What it costs
Your invoice, a 20-person firmMonthly
| 20 people × $125 | $2,500 |
| Your team, every computer, the backup, security | included |
| Security + Compliance for regulated work, 20 × $30 | $600 |
| Hours billed | none |
| Projects, mostly new laptops and network equipment | quoted first |
| Microsoft 365 licenses, at Microsoft's price | their own line |
| Your monthly total | $3,100 |
|---|
People in the field, on a phone or tablet$30 a person, instead of $125
I have been using the services of Protected Trust since 2010. They constantly deliver on the needs of my companies from SOC audits to employee onboarding and off boarding.
A story from Ingram
Do you really have cyber insurance? Ask an owner and the answer is usually yes. Look at the policy and it is often a small line on another policy, with a limit smaller than the losses it is meant to cover.
Not quite this?
Something else going on? See what usually brings people to us
The company behind your team
Pick a time that suits you.
Pick a time Or call 863-594-1141
Opens our booking calendar in a window.
Questions people ask
Plain answers.
Do I have to be a client for you to fill in the form?
Filling it in with you, and keeping the proof current, is part of what we do for clients. If you are not one yet, we are glad to talk it through on a thirty-minute call, and you leave knowing where you stand.
The renewal is due soon. Is there time?
Often, yes. Call with the date, and you will hear what can be done by then.
What is a WISP?
A written information security plan: the document that says how your firm protects client information. Tax preparers and many financial firms are required to have one.
Is security extra?
Security is included for everyone. Regulated work adds Security + Compliance, an add-on of $30 more a person, for the policies and the paperwork the rules ask for.
Our own clients want proof from us. Can you help with that?
Yes. The same evidence answers a client's security questionnaire: the settings, the reports and the restore tests, written down and kept current.
Will you sign a BAA?
Yes. For medical practices and anyone handling health information, the business associate agreement is part of our agreement.
What does it cost?
$125 per person, per month, with security in every plan. Setup is $150 a person, with a $1,500 minimum. See what it costs.