Blog

I want you to think about access to your data. So where is your data? And then how do you access it to do that? You've got to define where is the data, the data on a server, the data in a cloud somewhere, where is the data if our office is shut down or we don't have access to this data somewhere, how's that going to inhibit our work and then should we consider putting the data somewhere else so we can continue to work.

When we're talking about compliance and what's needed for compliance,  it's kind of funny. Most of the conversations that we have  are what I'm going to call marketplace compliance. And here's what I mean by that. If you think about HIPAA, that's not marketplace compliance. That's government-mandated compliance for people in the healthcare industry.

If you look at the financial services sector, they're going to be, they're not marketplace compliance. They're regulated compliance by the SEC or FINRA. But when you are a law firm, a 20, 30 person law firm, and you're working for a bank  and the bank says, okay, for you to do this work for us, we want you to go ahead and go through the cyber questionnaire that looks very similar to what you may get from an insurance company who's doing a cyber liability questionnaire.