Glastonbury, Connecticut

hello@cttechnologysolutions.com(860) 987-7606

Technology Solutions
(860) 987-7606 Book a consultation

Home / Security

Security and compliance

Cybersecurity and compliance, done right.

We find the gaps that actually get businesses hurt, fix them at a fixed price, and keep the documentation your regulators and insurers expect up to date.

Book a consultation Free email security check
Assess

Know where you stand, in writing.

Every assessment ends with a fix plan you can act on, with a price for each item.

AI + Security Readiness Assessment

Our core assessment for organizations on Microsoft 365 or Google Workspace, scoped to the size of your environment.

  • Review of multi-factor sign-in, admin roles and security settings using CISA's public baseline tools
  • An oversharing and data exposure check before AI tools can read your files
  • An inventory of AI tools staff use on their own
  • A customized AI use policy
  • A prioritized fix plan with fixed prices
  • A 60-minute readout
Scoped to your environmentAsk about this

HIPAA Security Risk Analysis

For HIPAA covered entities and business associates handling electronic protected health information.

  • A documented risk analysis addressing HIPAA Security Rule risk-analysis requirements
  • An inventory of where patient data lives and moves
  • Business associate agreement check for email, cloud and AI tools
  • A risk management plan with a price for each fix
  • A section on AI use, including patient data pasted into chatbots
HealthcareAsk about this

WISP + FTC Safeguards Pack

For tax, accounting and financial firms that are required to keep a written information security program.

  • A Written Information Security Plan built for your firm, not a fill-in template
  • A risk assessment under the FTC Safeguards Rule
  • Multi-factor sign-in, encryption and backup check
  • Staff training with signed acknowledgments
  • A one-page incident response plan
Financial and accountingAsk about this
Fix

Close the gaps, at a fixed price.

Done with you, with your IT provider, or handed over as a plan you can run yourself.

Microsoft 365 Security Hardening

The fix list from an assessment, done and documented.

  • Multi-factor sign-in and conditional access
  • Microsoft Defender and Office 365 protection policies
  • A security baseline for company laptops through Intune
  • Email authentication fully enforced
  • Admin account cleanup
  • Before and after Secure Score
Microsoft 365Ask about this

Email Spoofing Fix

For any business whose domain can be spoofed. Check yours free.

  • SPF, DKIM and DMARC set up for the sending services agreed in scope
  • DMARC reports reviewed before increasing enforcement, with legitimate sending services checked first
  • A one-page before and after you keep
About 30 daysAsk about this
Ongoing

Keep it that way.

Monthly plans so security and compliance don't slide back after a project ends.

Compliance Keeper

Monthly plan

For organizations that need their WISP or HIPAA documentation kept current year after year.

  • Annual WISP or HIPAA risk analysis refresh included
  • A quarterly 20-minute check-in
  • Policy updates when the rules change
  • Monitoring of your email authentication reports
  • A breach response checklist, with email and phone guidance answered by the next business day
Documentation kept currentAsk about this

Virtual CISO

Monthly plan

Ongoing security and AI leadership, without adding a full-time role.

  • Security program ownership
  • Policies and risk register
  • Owner reporting
  • Vendor and AI tool reviews
  • Insurer liaison
  • Annual risk assessment
Agreed advisory scopeAsk about this

How an assessment works

Four steps, and nothing in your systems changes until you approve it.

  1. Kickoff

    A 30-minute call about your business, your tools and the rules you answer to. Scope and price agreed in writing.

  2. Review

    Read-only access to your settings, a short staff survey and the public records anyone can see.

  3. Readout

    A 60-minute walkthrough of what we found, ranked by what could actually hurt you.

  4. Fix plan

    A written plan with a fixed price for each fix. Do it with us, with your IT provider, or yourself.

Built on the frameworks auditors and insurers use

Every finding maps back to the rule it comes from.

Healthcare

HIPAA Security Rule

Risk analysis and safeguards for covered entities and business associates handling electronic protected health information. HHS guidance.

Financial

FTC Safeguards Rule

A written security program for financial institutions covered by the rule, including tax preparation firms and mortgage brokers. FTC coverage guidance.

Everyone

NIST Cybersecurity Framework

A framework for organizing cybersecurity risk management.

Connecticut

State breach law

What Connecticut requires you to do, and how fast, if personal information is exposed.

Get started

Talk to a Connecticut IT, security and AI professional.

A free 30-minute consultation about your tools, your risks and the rules you answer to. You leave with a clear next step.

Book a consultation Call (860) 987-7606