Does Your Business Keep Running? Most small businesses have no written plan for ransomware, hardware failure, or data breach — and no security leadership keeping those risks in check. These two services close both gaps.
HIPAA, GLBA, and most cyber insurance policies require a written Business Continuity Plan. Most small practices don’t have one.
A disaster recovery plan tells your team exactly what to do when systems fail. Without it, recovery takes 3× longer and costs 5× more.
A CISO reviews your security posture, trains your staff, and catches vulnerabilities before they become incidents. Most small businesses can’t justify a full-time hire.
Average ransomware recovery cost for small businesses: $200,000+. Businesses with a tested DR plan recover in days. Those without it may not recover at all.
Which systems and functions are critical, recovery priority ranking, and the business impact of each failure scenario.
Defined RTOs and RPOs for each critical system — how long it can be down and how much data loss is acceptable.
Documented process for confirming backups actually work — not just that they’re running.
Who does what in an incident, who notifies whom, and what gets communicated to clients and partners.
IT vendors, cloud providers, insurance contacts, legal counsel — documented and current.
HIPAA (45 CFR §164.308), GLBA Safeguards Rule, or ABA Rule 1.6 language as appropriate to your industry.
- Intake questionnaire
- 2-hour working session
- Written gap assessment report
- Top 5 priority recommendations
- 30-day email follow-up
- Everything in Essential
- Full Business Continuity Plan document
- Separate Disaster Recovery Plan
- RTOs and RPOs defined per system
- Industry compliance language included
- Two working sessions + 60-day support
- Annual review call
- Updated plan reflecting technology changes
- Compliance review documentation
- Available to all Full BCP/DR clients
We’ve already handled your end-of-life data securely. Ask us about completing your compliance picture with a BCP/DR plan — most regulated industries require both, and clients who’ve gone through our data destruction process qualify for a 10% discount on any BCP tier.
Dedicated call covering security posture, recent threats, vendor updates, and any open findings.
Quarterly external scan summary. Finding prioritization. Remediation guidance.
Annual review of acceptable use, password, access control, and incident response policies.
Annual phishing awareness and security hygiene training for your team.
Quarterly review of third-party vendor security posture. BAA and DPA status tracking.
Developed in Year 1. Updated annually. Covers ransomware, breach, and data loss scenarios.
- Monthly 60-min security review call
- Quarterly vulnerability scan summary
- Annual security policy review
- Email advisory (48-hr response)
- Everything in Essentials
- Quarterly vendor risk review
- Annual staff security training
- Incident response plan (Year 1)
- Priority advisory (same-day response)
- Everything in Leadership
- Quarterly on-site visit (within 30 miles)
- Owner/board security report quarterly
- Cyber insurance review & optimization
- Unlimited phone advisory
Start with a free 20-minute call. We’ll look at what you have, identify the most critical gaps, and tell you honestly which service fits your situation.
Diversified Tech Solutions · Johnson City, TN · avery@diversifiedtechsolutions.com
Business Continuity & Security services available to businesses throughout the Tri-Cities region and remotely nationwide.