Find the gaps
before the auditor does.
We assess your systems against the cybersecurity and regulatory requirements that apply to your business — then hand you a written, prioritized plan to address what we find.
Built around your requirements.
Every engagement is scoped to the rules and risks that actually apply to you.
HIPAA-related services
For medical and dental offices and the businesses that support them, delivered with a partner that specializes in healthcare IT.
NIST Cybersecurity Framework
Security assessments and solutions aligned with the NIST CSF, a widely used standard for identifying, protecting against and recovering from cyber risk.
Start with an assessment
Tell us what a client, regulator or insurer is asking for. We’ll help you work out which requirements apply.
LOCAL TEAM · SPECIALIST DEPTHManaged IT and strategic partnerships, working together.
TCB Solutions is your single point of contact. For specialized requirements like HIPAA, we work alongside an established managed services partner that supports medical offices, so you get specialist depth without managing another vendor.
What we check.
Policies on paper only count if the systems match. We review both and document what we find.
- 01Vulnerability scanning
Internal and external, across servers, PCs and network gear. - 02Access & passwords
Who can reach what, MFA coverage and stale accounts. - 03Backup & recovery
An actual restore test, not just a green checkmark. - 04Encryption
Data at rest on devices and in transit over email and Wi-Fi. - 05Patching & end-of-life systems
Unsupported software and missing updates flagged by risk. - 06Logging & monitoring
Whether you’d know a breach happened — and when. - 07Policies & documentation
Written policies, risk assessments and vendor agreements.
Five steps. Nothing happens without your sign-off.
-
STEP 1
Submit
Fill out the request form below or call the office.
-
STEP 2
Scope
An initial assessment of your requirements, systems and deadlines. Timeline and a custom quote follow.
-
STEP 3
Authorize
You approve a written scope and quote. No testing happens before this.
-
STEP 4
Test
Scheduled around your hours, non-disruptive by default.
-
STEP 5
Report
A written gap report and remediation plan, walked through with your team.
- Written gap report mapped to your framework
- Prioritized remediation plan
- Documentation to support your compliance efforts
- Approximate number of users, devices and locations
- Any audit, client or insurance deadline
- Questionnaires you’ve been asked to complete
Start your request.
Tell us what you’re working toward and when. We’ll follow up to schedule an initial assessment, and no testing begins until you’ve approved the scope in writing.
No obligation. We reply within one business day.
Before you request.
Does this certify us as compliant? +
No. An assessment shows where you stand and what to address. Compliance is an ongoing responsibility, and formal certification or attestation, where a framework requires one, comes from an independent assessor. We help you prepare and strengthen your security along the way.
Will testing disrupt my business? +
Testing is scheduled around your hours and is non-disruptive by default. Anything more intrusive is listed in the scope you approve, so nothing happens without your sign-off.
How long does it take? +
The timeline is set after an initial assessment of your requirements and environment. It depends on the number of users, devices and locations, and on the requirements involved.
What does it cost? +
Every engagement is custom-quoted. You’ll receive a written quote and scope after the initial assessment, before any work begins.
Is our information kept confidential? +
Yes. Findings are shared only with the contacts you name, and confidentiality terms are set in writing before work begins.