How long must a small business keep security logs? HIPAA, PCI DSS, Virginia insurance law and the FTC Safeguards Rule, plus a simple hot and cold retention plan.
Learn how to set your CMMC Level 2 assessment scope: the asset categories, what can be left out, and the steps to take now, even with Phase II on pause.
A plain-English DMARC setup guide for small businesses: SPF and DKIM first, a safe p=none start, Microsoft 365 steps, and how to reach reject without losing email.
Build an information security roadmap for your small business: a phased 12-month plan on NIST CSF 2.0 and CISA guidance, with Virginia compliance notes.
Plan a HSEEP aligned tabletop exercise with ready SitMan templates and a lean timeline for small teams. [Get help](https://www.totalcyber.com/msp-form/).
Separate guest and IoT devices, then follow six NIST and CISA aligned steps to segment networks. [Get help](https://www.totalcyber.com/msp-form/).
