Question 1

Is antivirus enough?

Accepted Answer

No. Traditional antivirus relies on signatures - it can only catch threats it already knows about. Modern attacks (ransomware, fileless malware, living-off-the-land techniques) bypass signature-based AV easily. EDR is what is needed: behavioral analysis that detects the patterns of an attack regardless of the specific malware. SentinelOne and similar tools represent the actual modern bar.

Question 2

What about cyber insurance requirements?

Accepted Answer

Cyber insurance applications now require specific controls - MFA on email, EDR on endpoints, segmented backups, written incident response plans. Not having these means denied claims or unaffordable premiums. We help clients meet these requirements as a normal part of the security stack, not as an emergency project right before renewal.

Question 3

Do you handle compliance frameworks like SOC 2 or HIPAA?

Accepted Answer

For most professional services firms, the relevant compliance is around protecting client PII and financial data, plus IRS Publication 4557 for tax preparers. We can build to those requirements. We do not currently focus on HIPAA or healthcare environments - that is a different specialty with its own audit requirements. For SOC 2, we can handle the technical controls; the policy and audit side typically involves a separate compliance partner.

Question 4

How do you handle phishing and social engineering?

Accepted Answer

Three layers. Technical - email security tooling that catches obvious phishing before users see it. Configuration - MFA so a stolen password is not enough on its own. Awareness - periodic training so users recognize the attempts that get through. No layer is sufficient alone. All three together dramatically reduce successful attacks.

Question 5

What if we already had a security incident?

Accepted Answer

First step is containment - isolating affected systems, rotating credentials, getting EDR deployed if it was not already. Then forensics - what got accessed, what got exfiltrated, what the timeline looks like. Then remediation - cleaning up, hardening, and making sure the same path can not be used again. We are capable for incident response, but if it is a major active incident a dedicated DFIR firm is sometimes the right call - and we can coordinate with one.

Question 6

How much should a small business spend on security?

Accepted Answer

Less than they think, if it is spent right. The basics (EDR, MFA, hardened M365, decent backups, patching) are well within reach for any business that takes IT seriously. The expensive parts are usually unnecessary tools sold by vendors with good marketing. Our default stack covers what genuinely matters at a price that is defensible for small business budgets.

A standard WISP, with your firm's name on it.

What you get

Before you ask