CyberFortify Consulting
Cybersecurity that Fits Your Business
Your trusted partner in cybersecurity services for Investment and Insurance services firms. With over 30 years of dedicated Information Security expertise, we specialize in helping investment and insurance agencies navigate and comply with the latest cybersecurity regulations. Two such crucial regulations for firms registered in Illinois are Illinois House Bill 2130, and House Bill 5243 which outline the necessary measures to protect nonpublic information and ensure the integrity of information systems.
We understand that each Agency/Firm is unique, and as such, we focus on what’s relevant for your business and tailor a comprehensive written information security program to the specific size, complexity, and activities of our business. This cost-effective proactive approach aligns you with current regulatory requirements, gives you an actionable list of vulnerabilities that are relevant to your business, and helps to keep your costs as low as possible.
Specializing in regulatory compliance for Insurance Agencies, Private investment firms, and Family owned investment offices.
Our Services:
- Comprehensive Risk Assessment based on recognized Cyber frameworks
- Incident Response planning and training
- Instructor led employee training on recognizing, preventing, and responding to Cyber Incidents
- 3rd party diligence program development
What to expect:
- An actionable list of prioritized potential vulnerabilities
- A mitigation road map to ensure the most impactful risks are mitigated first
- A compliant written Information Security Program tailored to your business that may contain:
- An Information Security Policy
- An Incident Response plan with documentation reporting requirements
- 3rd Party diligence program
Illinois Passes HB2130 and HB5243
HB2130 is an Insurance Data Security Law “to establish standards for data security and standards for the investigation of and notification to the Director of a cybersecurity event applicable to licensees”
HB5243 provides for an affirmative defense for firms with documented Cyber programs that conform to industry recognized Cyber Frame works.
3rd Party Diligence can be daunting and time consuming, yet is a requirement in current cyber compliance laws
CyberFortify’s bespoke 3rd party diligence program is designed for small to mid-sized businesses to be compliant without being onerous.