Free security guides

Practical, plain-English guides for CPA firms, law firms, medical practices and defense contractors. Written by a Certified CMMC Assessor and ISO 27001 Lead Auditor.

CPA firms · law firms · medical practices

How Professional Firms Get Phished: AI Edition

The AI-written scams aimed at tax, legal and medical offices
Real examples: fake new clients, wire fraud, EHR login traps
Five rules that stop most attacks

Get this guide

Any firm using Copilot, ChatGPT or Gemini

Is Your AI Assistant Oversharing?

A 15-minute checklist for AI tools and permissions
Client consent, BAAs and vendor terms
How to tell if you have shadow AI

Get this guide

CPA firms · law firms · medical practices

Security Requirements Checklist

FTC Safeguards Rule and IRS WISP for tax firms
Ethics rules and ABA opinions for law firms
HIPAA Security Rule for medical practices

Get this guide

Defense contractors

Phase II Is Paused. Your SPRS Score Isn't.

What the CMMC pause did and didn't change
Why your SPRS score is a legal statement
A 10-point self-check before someone else checks

Get this guide

Get your free guide

Guide

Full name

Company

Work email

Phone (optional)

Industry

Company size