Compliance and cybersecurity readiness for your business
We help you find security gaps, fix them, and answer customer, insurer and auditor requirements with confidence, from assessment through remediation.
Free remote IT & security assessment
Know where your risks are before they become outages.
- Network, backup and security review
- Plain-English report, prioritized fixes
- Target response within one business day
What insurers and regulators expect
A short guide to the controls cyber insurance and compliance rules ask for, and how to show you have them.
Read the transcript
Cyber insurance and compliance, in plain English. Insurance applications often ask about multi-factor authentication, tested backups, endpoint protection, employee security training, and an incident response plan. We help you get ready. First, we review where you stand. Next, we fix the gaps. Then we document what is in place, and we keep it current as your business grows. Your requirements depend on your industry and your contracts. Common examples include HIPAA for health information, PCI for card payments, and NIST based security controls. One important note. CTEKS provides technical safeguards and readiness support. This is not legal advice, and it does not certify compliance. Check your requirements with your legal, insurance or compliance advisor. Know where you stand. Start with a free assessment.
Meet today’s cybersecurity and compliance requirements
CTEKS helps businesses understand, prepare for, and meet today’s cybersecurity and compliance requirements. We work with your organization to identify security gaps, strengthen your environment, and help ensure the appropriate technical safeguards, policies, and controls are in place.
Rather than simply answering the questions, we help validate that your environment actually supports the responses being provided.
Questionnaires, reviews and audits
Customer security questionnaires
Accurate answers backed by what your environment really does.
Vendor security assessments
Evidence and responses for the vendors and partners you work with.
Cyber insurance questionnaires
Renewals and applications answered with confidence, and gaps fixed first.
Customer security reviews
Support when a client audits how you protect their data.
Compliance documentation
Policies, inventories and evidence organized for auditors.
Audit preparation
A clear picture of where you stand before the auditor arrives.
The controls behind your answers
We check each area against what customers, insurers and auditors expect.
From assessment to remediation
Assess
We review your environment and find the security gaps.
Validate
We confirm your setup supports the answers you give.
Remediate
We fix gaps with you: controls, policies and tools.
Maintain
Regular reviews keep you ready as requirements change.
Where gaps are identified, we provide recommendations and work with your team to remediate them so your organization can meet (and wherever practical, exceed) the security requirements expected by customers, vendors, insurers, auditors, and regulatory frameworks.
Rules we help businesses meet
CMMC
Who it affects: Defense contractors and subcontractors that handle federal contract information or controlled unclassified information.
What it asks for:
- Controls based on NIST SP 800-171 at Level 2
- Access control, MFA and encryption
- Logging, monitoring and incident response
- A system security plan and evidence
FTC Safeguards Rule
Who it affects: Non-bank financial businesses such as mortgage brokers, auto dealers, tax preparers and lenders.
What it asks for:
- A written information security program
- Risk assessment and access controls
- MFA, encryption and monitoring
- Incident response and vendor oversight
NYDFS 23 NYCRR 500
Who it affects: Entities licensed by the New York Department of Financial Services, such as insurers and banks.
What it asks for:
- A cybersecurity program and policies
- MFA, encryption and audit trails
- Risk assessments and testing
- Incident response and notice duties
Healthcare? See our HIPAA IT support. Also ask us about PCI and cyber insurance requirements.
Ready when you are
Whether you are responding to a new customer security questionnaire, renewing cyber insurance, preparing for an audit, or improving your overall security posture, CTEKS can help guide the process from assessment through remediation.
CTEKS is an IT and security provider, not a law firm, auditor or certification body. We implement and document the technical controls. Your attorney, auditor or the certifying body decides whether you meet a specific rule.
All CTEKS resources
Knowledge Base
Guides on IT, security and cloud
Learn moreBlog
Latest articles
Learn moreCustomer Stories
How we help clients
Learn moreVideos
Short explainers on IT and security
Learn moreManaged IT vs Break-Fix
Compare the two approaches
Learn moreManaged IT vs In-House
Compare with hiring your own team
Learn moreSecurity Checklist
Free 25 point PDF
Learn moreCyber Insurance Checklist
Free readiness PDF
Learn moreIT Cost Calculator
See a starting monthly estimate
Learn moreDowntime Cost Calculator
What an outage costs you
Learn moreSecurity Self-Check
Score your security in 2 minutes
Learn moreSwitching IT Providers
A six step switch plan
Learn moreIT Partner Checklist
Free download
Learn moreGet Support
Phone, ticket and remote help
Learn moreCommon questions
Can CTEKS make us CMMC or FTC compliant?
We handle the technical controls, monitoring and documentation support. Final determinations come from your auditor, counsel or the certifying body.
Can you help with a customer security questionnaire?
Yes. We help answer it accurately and confirm your environment supports each response, then fix any gaps before you send it.
Can you help with cyber insurance renewals?
Yes. We review the insurer questionnaire, check controls such as MFA, backups and endpoint protection, and remediate gaps that could affect coverage or cost.
Where do we start?
With a free assessment. We compare your current setup to the requirement that applies to you and give you a prioritized list.
Do you support other rules?
Yes. Ask us about HIPAA, PCI, cyber insurance requirements and client security questionnaires.
Start with a compliance gap check
Tell us which requirement applies to you and we will take it from there.
- Network, backup and security health check
- Plain-English report with a priority list
- Written quote if you want our help
Prefer to talk? (847) 200-3666
Request your free remote assessment
Prefer to pick a time? Pick a time for a 30 minute Microsoft Teams discovery call. No obligation.
