IT Compliance
If you handle patient records, client financial data, insurance applications, or defense-related work, there's a rule that applies to your IT — and an auditor, carrier, or regulator who may ask you to prove it. We make the technical controls real and the documentation ready.
Controls You Can Actually Prove
Compliance isn't a certificate you buy. It's a set of controls — MFA, encryption, backups, logging, access reviews — configured, monitored, and written down. That's the work.
HIPAA Security Rule
Risk analysis, access controls, encryption at rest and in transit, audit logging, device management, and a Business Associate Agreement. For medical and dental practices, therapists, labs, and anyone handling ePHI.
FTC Safeguards Rule
Binding on insurance agencies, CPAs and tax preparers, mortgage brokers, auto and aircraft dealers who arrange financing, and more. We implement the required controls — MFA, encryption, monitoring, a qualified individual, a written program — and document them.
Florida FIPA
The Florida Information Protection Act requires reasonable measures to protect personal data and sets a 30-day breach notification clock. We put the measures in place and give you an incident response plan so the clock never starts.
CMMC / NIST 800-171
Work in the defense supply chain — aviation, manufacturing, engineering? CMMC Level 1 and 2 readiness: gap assessment, control implementation, SSP and POA&M documentation, with a former Navy Cryptologist who has handled classified systems.
Cyber-Insurance Readiness
Carriers now require MFA, EDR, backups, and email security before they'll write or renew a policy — and they deny claims when the application was inaccurate. We get you compliant, then fill out the questionnaire with you, truthfully.
Policies & Training
Acceptable use, password, incident response, and data-handling policies written for your business, plus the staff training every framework requires — with attendance records.
Audit Logging & Reviews
Centralized logs, quarterly access reviews, and the evidence trail an auditor asks for. If someone asks who accessed a file last March, you'll be able to answer.
Ongoing Compliance Management
Rules change, staff change, systems change. Monthly managed compliance keeps the controls in place and the documentation current, so the next renewal or audit is routine.
You Probably Have More Obligations Than You Think
An insurance agency is covered by the FTC Safeguards Rule. A CPA is too. A real-estate closing attorney handles enough financial data to be a target and a regulated entity at once. A machine shop with one defense contract needs CMMC. Most of our clients had no idea until someone asked.
- Former Navy Cryptologist and NSA-certified — classified-data discipline applied to your controls
- We serve law, medical, insurance, accounting, real estate, aviation, and manufacturing clients in Tampa Bay
- Technical controls and documentation from one provider, so they actually match
- Honest gap assessments — we tell you what's missing, not that you're 'basically fine'
- We don't sell certifications; we make you able to pass the audit
Common Questions
Find Out Where You Stand
A compliance gap assessment tells you which rules apply, which controls you're missing, and what it takes to close the gap. Contact Landshark IT to schedule one.