Guides

Plain-language guides to the rules organizations ask us about for compliance and security programs.

Talk with ALCON DTS

Guide

Texas Cybersecurity Safe Harbor (SB 2610)

Texas SB 2610 bars punitive damages in breach suits for businesses under 250 employees with a framework-based security program.

Read the guide
Guide

HIPAA Security Risk Analysis

A HIPAA security risk analysis is required for covered entities and business associates.

Read the guide
Guide

California Privacy (CCPA)

Who the thresholds catch, what a request path has to do, and what ALCON DTS does not decide.

Read the guide
Guide

CMMC for DoD Suppliers

CMMC can apply to DoD contractors and suppliers that handle FCI or CUI.

Read the guide
Guide

Texas Breach Notification Law

Texas law requires breach notice to individuals within 60 days and to the Attorney General within 30 days for 250 or more Texans.

Read the guide
Guide

Business Associate Agreements Under HIPAA

HIPAA requires a business associate agreement before a vendor handles patient information.

Read the guide
Guide

CIS Controls® Implementation Group 1 (IG1)

CIS Controls IG1 is 56 essential Safeguards in CIS Controls v8.1.

Read the guide
Guide

NIST Cybersecurity Framework 2.0

NIST CSF 2.0 organizes security into six Functions, including Govern.

Read the guide
Guide

Microsoft 365 Copilot Readiness

Get your Microsoft 365 environment ready for Microsoft Copilot: fix oversharing, apply sensitivity labels, confirm licenses and plan a pilot before rollout.

Read the guide
Guide

ePHI in Microsoft 365

Keeping patient data in Microsoft 365? See what Microsoft’s BAA covers, what you configure, and how MFA, encryption, audit logs and sharing map to HIPAA.

Read the guide
Guide

MFA and Conditional Access

Which MFA methods resist phishing, how Conditional Access and legacy sign-in blocking work, break-glass accounts, and how MFA maps to HIPAA, CMMC and CIS IG1.

Read the guide
Guide

Security Questionnaires

How to answer SIG, CAIQ, HECVAT and cyber insurance questionnaires honestly, what evidence to keep, and how ALCON DTS can help draft technical answers.

Read the guide
Guide

SOC 2

What a customer is asking for, who issues the report, and what ALCON DTS does not sign.

Read the guide
Guide

PCI DSS for Merchants

What the payment standard covers, who decides the questionnaire, and what ALCON DTS does not attest.

Read the guide

Talk with ALCON DTS

Email: info@alcondts.com · Phone: 512-892-6900

Talk with ALCON DTS