Account access and MFA
Who can sign in to Microsoft 365 or Google, whether multi-factor sign-in is on, how admin accounts are kept, and whether access is removed when staff leave.
Cybersecurity & Compliance Assessment · NYC & Bergen County, NJ
Know where your business is exposed, in plain English.
We review how your accounts, email, devices, network and backups are set up, score what we find, and give you a short list of what to fix first. A read-only review, not a penetration test.
Areas covered
Seven areas, 20+ checks, depending on your industry. Every score is backed by evidence.
Email security
SPF, DKIM and DMARC settings, and the outside apps connected to your email and files.
Devices and antivirus
Whether antivirus is on and reporting, and whether computers get their updates.
Network and Wi-Fi
Firewall, remote access, guest Wi-Fi kept separate, and POS on its own network.
Backup and recovery
Whether backups run and whether a restore has been tested.
Staff awareness and incident response
Phishing awareness and whether there is a plan for when something goes wrong.
Compliance
A gap check against the rules that commonly apply to your industry (below).
What’s included
Compliance gap check by industry. Where you stand against rules that commonly apply to businesses like yours.
This compliance review checks your practices against these rules. It is not a certification, audit or legal advice.
Price: Starting at $750 for businesses up to about 15 people. Larger teams: contact us.
IT as a Service clients save 80%.
Everyone in NY
NY SHIELD Act
- Reasonable safeguards for New Yorkers’ private information
- Breach notice readiness
NJ businesses
NJ data breach notification law
- Knowing what counts as a breach
- Who to notify and how
Healthcare (dental, medical, therapy)
HIPAA Security Rule
- Security Rule safeguards for patient information
Restaurants and retail
PCI DSS
- Card-payment basics: POS on its own network, no stored card data, vendor remote access controlled
Insurance and financial firms
NY DFS 23 NYCRR 500
- Cybersecurity program, annual certification, vendor oversight
Tax preparers, accountants, auto dealers and lenders
FTC Safeguards Rule
- Safeguards for customer financial information
Who it’s for
Small businesses in NYC and Bergen County, NJ, with 1 to about 50 people.
Restaurants & POS
Restaurants
POS on its own network, guest Wi-Fi kept separate, and PCI DSS card-payment basics.
Restaurant ITHealthcare
Medical clinics
Dental, medical and therapy offices, checked against HIPAA Security Rule safeguards.
Medical office ITHospitality
Hospitality
Guest Wi-Fi, staff devices and back-office systems, checked for separation and access.
How it works
-
Interview
A 60 to 90 minute interview with the owner or manager, on-site or by video.
-
Read-only review
With your permission, we review Microsoft 365 or Google sign-in and MFA settings, SPF/DKIM/DMARC, connected third-party apps, network and Wi-Fi (including guest separation and POS on its own network), firewall and remote access, antivirus status, updates and backups. We look; we don’t change anything. A read-only review, not a penetration test.
-
Scoring
We score 20+ checks, depending on your industry, across 7 areas: accounts, email, devices, network, backup, people and response, and an industry compliance section. Every score is backed by evidence.
-
Report
A plain-English report with your overall score, results by area, top 3 fixes and an evidence appendix, reviewed by our security lead.
-
Walkthrough
A 30-minute walkthrough of the results and a fix plan. We can do the fixes as part of IT as a Service.
Common questions
How long does it take?
About 1 to 2 weeks from the interview to the walkthrough.
Is this a penetration test?
No. A read-only review, not a penetration test. We look at how things are set up and don’t change anything.
Is this a compliance certification?
This compliance review checks your practices against these rules. It is not a certification, audit or legal advice.
Will it disrupt our business?
No. The review is scheduled around your hours, and nothing is changed without your approval.
What do we get out of it besides the fixes?
A documented baseline you can repeat later to show what has improved. It also helps when a cyber insurance questionnaire or a partner’s security questions arrive.
What happens after the report?
The fixes are yours to schedule. We can do them as part of IT as a Service, or your team can use the report as a checklist.
How much does it cost?
Starting at $750 for businesses up to about 15 people. Larger teams: contact us. IT as a Service clients save 80%. Call (212) 960-8139 or book an assessment.
Book an assessment
Call (212) 960-8139 or book online. Starting at $750 for businesses up to about 15 people. Larger teams: contact us. IT as a Service clients save 80%.
