Cyber insurance and compliance
Cyber Insurance Readiness and Compliance Help
We review the security requirements in your cyber insurance policy and help make sure your controls meet them, and we help you prepare for the security standards your business has to follow.
- In business since 2008
- CompTIA certified
- Office in Fremont, CA
Quick answer
Fasthuma IT Solutions & MSP reviews your cyber insurance policy’s security requirements and helps make sure your controls meet them, so you’re not caught out when you need to file a claim. We also help businesses prepare for HIPAA, PCI DSS, CMMC, NIST CSF, SOC 2 and CCPA requirements. Formal audits and certifications, where a standard has them, are done by independent auditors or assessors.
Cyber insurance policy review
Cyber insurance policies and applications can ask about the security controls you have in place. If what is on paper does not match what is on your network, that is a problem you want to find before an incident, not after.
- We read the security requirements in your policy and application with you.
- We compare them with your network, using an on-site risk assessment.
- We help close the gaps, from two-factor authentication to backups and endpoint protection.
- You get it in writing: the report shows what is in place and what was fixed.
Claim decisions are made by your insurer. What we can do is help make sure the security controls your policy asks for are actually in place and documented.
Compliance help
Standards we help businesses prepare for
We assess your network against the technical security requirements of the standard, then help fix the gaps on your roadmap.
HIPAA
The U.S. law that protects health information. Its Security Rule sets safeguards for electronic health information.
PCI DSS
The security standard for businesses that store, process or transmit payment card data.
CMMC
The U.S. Department of Defense Cybersecurity Maturity Model Certification program for defense contractors.
NIST CSF
The NIST Cybersecurity Framework, a voluntary framework for managing cybersecurity risk. Our assessments use its principles.
SOC 2
An attestation report on a service organization’s controls, issued by an independent CPA firm after an audit. We help with readiness.
CCPA
The California Consumer Privacy Act, which includes a duty to keep consumers’ personal information reasonably secure.
We are not a law firm or an audit firm, and this is not legal advice. Fasthuma helps you prepare; formal audits and certifications are done by independent auditors or assessors.
How it works
- Book a free phone consultation and tell us about your policy or the standard you need to meet.
- On-site risk assessment of your network, with the policy or standard in mind.
- Report, roadmap and timeline showing the gaps and the order to fix them.
- Fixes through our network security and refresh work, and managed security to keep the controls working.
The assessment is billed at our on-site assessment rate ($1,000/hour up to 500 devices, $2,500/hour above). Fixes are quoted per project.
FAQ
Insurance and compliance questions
Can you guarantee my cyber insurance claim will be paid?
No. Claim decisions are made by your insurer. We review your policy’s security requirements and help make sure your controls meet them and are documented, so you’re not caught out when you need to file a claim.
Which compliance standards do you help with?
HIPAA, PCI DSS, CMMC, NIST CSF, SOC 2 and CCPA. We help you prepare for the technical security requirements; formal audits and certifications are done by independent auditors or assessors.
Do you perform SOC 2 audits?
No. A SOC 2 report is issued by an independent CPA firm. We help with readiness: finding and fixing gaps in your security controls before the audit.
Is this legal advice?
No. We are an IT company, not a law firm. For legal questions about your obligations, talk to your attorney.
Check your policy against your network
Book a free phone consultation. We’ll look at what your policy or standard asks for and plan an on-site assessment around it.