Compliance & regulatory coverage
Plain-English explanations of the compliance frameworks we help South Florida businesses navigate, grouped by sector. For how we apply them, see the pages for medical practices, law firms and financial firms.
Healthcare
HIPAA
What HIPAA requires of your IT, who has to comply, and what happens when you don’t.
HITECH
The law that gave HIPAA teeth — breach notification and direct vendor liability.
EHR security
Why electronic health record systems are not normal software and shouldn’t be treated like it.
PACS / DICOM
Why medical imaging servers are one of the most exposed weak points in healthcare IT.
Legal
ABA ethics
How the ABA Model Rules and formal opinions translate into IT obligations for attorneys.
eDiscovery
Litigation holds, defensible preservation, and FRCP Rule 37(e) for small and mid-size firms.
Data privacy
Florida Digital Bill of Rights, CCPA, and the state patchwork — what they require of small businesses.
Financial
GLBA
Privacy Rule, Safeguards Rule, and what the FTC expects from financial professionals.
FTC Safeguards Rule
The nine elements of the written information security program the FTC requires.
SOX
IT General Controls and Section 404 for accounting firms and SMBs that service public companies.
PCI-DSS
What every business accepting card payments must do — and what happens when they don’t.
Security & risk
NIST CSF
The six functions of NIST CSF 2.0 and why regulators and insurers reference it.
Cyber insurance
What carriers actually require on the application, and why most small businesses fail it.
Blue team
What active defense looks like, and why antivirus alone is not it.
Purple team
Attack and defense working together to prove what your controls actually stop.