Who we are · Notes
Security + Compliance
The form, the rule, the phish, and what each one asks of a practice or a firm.
Every note on Security + Compliance

Every fall the same envelope arrives, and it is never addressed to the person who can answer it.
The Security Rule calls encryption addressable, not required. Here is what that word means, and why an encrypted laptop never becomes a reportable breach.
In 2020 I ran a phishing attack on camera, from the attacker's chair and then from the victim's, to show how little it takes to give away a password.

The emails a good test sends, and what happens when someone clicks.

Usually your data can stay where it is. Here is what the two laws actually ask.
Ask us instead. A real person answers, and the good questions become notes.
Let’s talk
Thirty minutes with a real person.
Tell us what’s going on with your technology, what’s working and what isn’t. We’ll listen, ask a few questions, and tell you honestly whether we’re the right fit. No slides, no pitch.
Write to hello@protectedtrust.com. A real person answers, and the good questions become notes.