Knowledge Base
Find answers to common questions and learn more about our services
Encryption verification for laptops field checklist
## Overview
Assuming Intune policy applied ≠ disk actually encrypted—spot verify during onsite.
## Checks
BitLocker on + protectors healthy; FileVaul...
compliance-audits-insurance
msp
seed-library
Jul 10, 2024
Read more →
Policy acknowledgment tracking for employees
## Overview
Unsigned policy means training theater in court—track clickwrap or signed PDF.
## Stack
HRIS onboarding task blocking start date completi...
compliance-audits-insurance
msp
seed-library
Jul 9, 2024
Read more →
Penetration test remediation tracking
## Overview
PDF pentest shelfware invites negligence claims—ticket every finding.
## Fields
Finding ID, severity, exploitability, owner, due date, co...
compliance-audits-insurance
msp
seed-library
Jul 8, 2024
Read more →
MDR/SOC reporting integration expectations
## Overview
MDR sells 24×7 eyes—define what “report” means or arguments follow.
## Deliverables
Monthly summary incidents, MTTD/MTTR metrics, tuning...
compliance-audits-insurance
msp
seed-library
Jul 7, 2024
Read more →
Access review attestation emails template
## Overview
Managers must certify direct reports’ access quarterly for SOX-like programs.
## Email skeleton
Subject: `Q3 Access Certification – Actio...
compliance-audits-insurance
msp
seed-library
Jul 6, 2024
Read more →
Vendor risk register update cadence
## Overview
Vendors drift—SOC2 expires, breaches happen, products sunset.
## Cadence
Annual deep review high/critical; semi-annual light touch medium...
compliance-audits-insurance
msp
seed-library
Jul 5, 2024
Read more →
Logging retention for GDPR requests
## Overview
DSAR responses need logs of processing sometimes—too short retention frustrates investigations; too long risks proportionality challenges....
compliance-audits-insurance
msp
seed-library
Jul 4, 2024
Read more →
PII data map starter questionnaire
## Overview
Data map underpins GDPR/CCPA programs—start simple spreadsheet before fancy software.
## Columns
Data category, system of record, flows t...
compliance-audits-insurance
msp
seed-library
Jul 3, 2024
Read more →
Cyber insurance questionnaire primer
## Overview
Applications became detailed—prepare data room proactively.
## Collect
MFA coverage %, EDR vendor, backup immutability yes/no, IR retaine...
compliance-audits-insurance
msp
seed-library
Jul 2, 2024
Read more →
SOC 2 readiness: common MSP control gaps
## Overview
MSPs chase SOC 2 Type II to win enterprise deals—know frequent failure modes.
## Gaps list
Access reviews undocumented; change management...
compliance-audits-insurance
msp
seed-library
Jul 1, 2024
Read more →
PCI segmentation evidence collectors expect
## Overview
PCI scoping is diagram + config proof—not vibes that VLAN names imply security.
## Evidence bundle
Network diagrams with CDE highlighted,...
compliance-audits-insurance
msp
seed-library
Jun 30, 2024
Read more →
HIPAA BAA inventory maintenance
## Overview
Without current BAAs you cannot legally attribute responsibility for PHI processing.
## Inventory fields
Vendor legal name, service scope...
compliance-audits-insurance
msp
seed-library
Jun 29, 2024
Read more →