OPSWORQ

Compliance

The controls and the evidence, in place.

HIPAA, a WISP for tax and accounting firms, CMMC Level 1 and your cyber insurer’s questionnaire ask for the same thing in different words: technical controls that work, and records that prove it. We put both in place and keep them current.

Talk about compliance Call 1‑855‑OPSWORQ

Controls that work · Evidence on file · Reviewed every quarter

A clipboard with a blank checklist and an orange pen, beside a closed laptop.

Frameworks we support

One set of controls. Every framework that asks for them.

HIPAA Security Rule

The technical safeguards for practices that hold patient information.
The IT side of HIPAA

A WISP for tax firms

The written security plan the IRS expects, with the controls behind it.
WISP for tax and accounting

CMMC Level 1

The basic safeguards for suppliers handling federal contract information.
CMMC Level 1

Cyber insurance

Every question on the questionnaire answered from evidence.
Insurance readiness

Policies that match reality

Written to describe what actually happens, so they survive an auditor’s first question.

Evidence, every month

Patching, backups, restore tests and security findings, recorded in your monthly report.

How it works

Map. Close. Record. Review.

Every requirement is traced to a control and every control to its evidence, so the answer to an auditor is a document, not a promise.

  1. 01

    Map

    Each requirement to the control that meets it and the evidence that proves it.

  2. 02

    Close the gaps

    Missing controls put in place, in the order that removes the most risk.

  3. 03

    Keep the record

    Evidence collected as the work happens, not reconstructed the week before an audit.

  4. 04

    Review

    Every quarter, and whenever the business or the rules change.

We support your compliance. We don’t certify it.

We build and run the technical safeguards your framework asks for and keep the records an auditor wants to see. Certification and legal advice belong to your assessor and your attorney.

Questions

Straight answers.

Do you certify us?
No. We support your compliance program: we put the technical controls in place and keep the evidence. Certification, attestation and legal advice belong to your assessor, your auditor and your attorney.
Will you work with our auditor or insurer?
Yes. We answer their technical questions from the evidence and show them the records, so you aren’t translating between two specialists.
What is a WISP?
A written information security plan, which the IRS expects of every tax preparer. A WISP for tax and accounting firms, explained.
We have a cyber insurance questionnaire due. Can you help?
Yes. We map each question to a control and to the evidence, put the missing ones in place, and help you answer truthfully. Cyber insurance readiness.

Get started

Tell us which framework, and when it’s due.

1‑855‑OPSWORQ

855‑677‑9677 · Mon–Fri, 8am–5pm ET

If the business has stopped, call. Don’t use the form.

An engineer replies within one business day.

What’s it about? Select all that apply.

A sentence is plenty.

A person replies within one business day. Nothing is sold, and you’re not added to a mailing list.

Prefer to talk? Pick a time for a 20‑minute call (opens in a new tab) Or call 1‑855‑OPSWORQ.

Call Talk to an engineer