Short pieces on the documents and rules a US small business runs into at an insurance renewal or a client security review. No scare stats, no jargon left unexplained.
An MSP that has one and not the other usually finds out which one it’s missing during a claim. What errors and omissions insurance actually covers, what it doesn’t, and where cyber insurance picks up.
Read →Staff are already pasting things into ChatGPT and Copilot whether or not there’s a policy about it. A ban doesn’t work and a one-line “be careful” doesn’t either — what a working AI acceptable use policy actually has to cover.
Read →Multi-factor authentication went from a line in the fine print to the question that decides whether a carrier will quote you at all. What changed, where MFA usually still has gaps even when someone thinks it’s “done,” and what to check before the renewal lands.
Read →Most business continuity plan templates run twenty pages and get written once, then never opened again. What actually has to be decided — in what order, with which two numbers — to make a plan someone will still have read by the time it matters.
Read →MSPs write the security policy for every client on the book and rarely one for themselves. What’s changed is that your own cyber and tech E&O insurer, and a growing share of client contracts, now ask for it directly.
Read →HIPAA sorts businesses into two roles with different duties, and a lot of small firms cannot tell which one they are. The test that actually decides it, what each role owes, and why “we are not sure” is the answer worth acting on.
Read →Carriers and clients ask for one by name, and most of what gets written is far too long to use at 2am. What belongs in a small firm’s plan, the clocks that start running, and the call most owners make in the wrong order.
Read →A spreadsheet of security questions from your biggest customer is a procurement step, not an exam. What it is really testing, why “no” beats a generous “yes”, and how to answer it once and reuse it.
Read →A Written Information Security Program is the document your insurer, your biggest client, and the FTC all ask for under three different names. What it is, who is expected to have one, and what has to be in it.
Read →The Safeguards Rule reaches far more small firms than the phrase “financial institution” suggests — tax preparers, bookkeepers, advisers and firms that arrange financing. What it asks for, and what changes if you hold fewer than 5,000 consumers’ records.
Read →The control set US carriers now underwrite small businesses on, why “not sure” is scored as a no, and why answering honestly is the answer that protects you at claim time.
Read →The free check asks 8 questions and shows how your business would answer the security questions applications and client questionnaires ask most often. It runs the same engine that writes the documents, asks for no email, and takes about a minute.
No account, and nothing to unsubscribe from afterwards.