SentinelOne EDR
Behavioral AI that spots and contains threats automatically, including ransomware rollback.
Security & compliance
Protected, documented,
and ready when someone asks.
Whether the question comes from your insurer, an auditor or a patient, you’ll have the controls in place and the paperwork to prove it.
- MFA on all accounts✓ pass
- EDR on every device✓ pass
- Backups restore-tested✓ pass
- Security awareness training! due
- Written security policies✕ missing
- Business associate agreements✕ missing
3 of 6 controls in place→ remediation plan attached
Security in layers
No single tool stops everything. Each layer covers the gaps in the one before it.
Microsoft Sentinel SIEM
Logs from Microsoft 365, Azure, firewalls and endpoints in one place, correlated to catch what single tools miss.
MFA & access control
Enforced MFA, conditional access, least-privilege permissions and clean offboarding.
Backup & recovery
NinjaOne Backup for endpoints, Veeam and Azure Backup for servers, restore-tested monthly: your last line of defense against ransomware.
Firewall & segmentation
Rule reviews, segmented networks, secure VPN and monitored perimeter events.
Patching & encryption
Automated patching via NinjaOne, plus disk encryption and compliance policies through Intune.
Training & vCISO guidance
Staff awareness training, plus executive-level security advice without a full-time CISO salary.
Flagship · healthcare
HIPAA-ready, not HIPAA-hopeful.
I currently keep two healthcare clients HIPAA compliant. You get the technical safeguards, the documentation and the yearly review, all from the person who runs your IT.
- Security risk analysisThe documented assessment HIPAA requires, refreshed annually.
- Remediation planPrioritized fixes, and I implement them.
- Policies & proceduresWritten, tailored to your practice, kept current.
- BAA trackingEvery vendor that touches patient data, accounted for.
- Access & audit loggingWho accessed what, and when, centralized and reviewable in Microsoft Sentinel.
- Workforce trainingAnnual training with completion records.
Cyber insurance readiness
Insurers now require MFA, EDR, backups and patching before they’ll write or renew a policy. I close the gaps, document the controls and fill in the questionnaire with you.
Get insurance-ready →NIST CSF / CIS security baseline
A scored assessment against the NIST Cybersecurity Framework and CIS Controls, with a prioritized roadmap. It answers the question “how secure are we, really?”
Get a baseline →How an assessment works
- 01 / assessFind the gapsInterviews, a technical scan and a policy review against the framework you need.
- 02 / remediateClose themI fix the technical controls myself rather than handing you a to-do list.
- 03 / documentProve itPolicies, evidence and a report you can hand to an insurer or auditor.
- 04 / monitorStay thereOngoing monitoring and an annual review keep you compliant all year.
Where IT meets marketing
Is your website compliant too?
HIPAA-safe tracking, cookie consent, ADA accessibility and email authentication, covered on the marketing side.
Questions
Can you make us “HIPAA certified”?
There’s no official HIPAA certification. Anyone selling one is selling a badge. What regulators look for is a current risk analysis, safeguards in place and documentation to prove it, and that’s what you’ll have.
What’s a vCISO?
A virtual Chief Information Security Officer: senior security leadership, such as risk reviews, roadmaps and policy, on a part-time basis instead of a full-time salary.
Will this help with our cyber insurance?
It helps you meet the controls insurers ask about and answer their questionnaire accurately. Pricing and coverage are up to your insurer.
How long does an assessment take?
A comprehensive assessment typically takes 1–2 weeks, depending on the size of your organization and the framework.
Readiness and gap assessments, control implementation and ongoing monitoring. This is technical guidance, not legal advice.
Know where you stand before someone else asks.
Start with a gap assessment. You’ll get a clear report and a prioritized plan, whether or not we work together.
Get a gap assessment