A 55-person CPA firm in Columbus was 45 days from cyber-insurance renewal. The carrier was raising premiums 28% unless the firm could prove additional controls: MFA on every privileged account, EDR on every endpoint, documented incident response, monthly security awareness training, and a vetted backup/restore process. The firm had email MFA only. They had no EDR, no documented IR plan, no formal training program, and their backups had not been test-restored in 18 months.
What we did
Placed the MDR partner (SOC 2 Type II audited, US-staffed) and deployed EDR on all 55 endpoints in week 2
Rolled out conditional access MFA across Microsoft 365 admin, file-share, and accounting-software access in week 3
Built and documented the incident response playbook with the firm's COO and outside legal
Stood up KnowBe4 security awareness training program with monthly phishing simulations
Tested backup restores from immutable storage on three sample client engagements; documented results for the carrier
What changed
Carrier accepted the questionnaire response on the first submission; no follow-up questions
Premium dropped 35% versus the proposed renewal (effectively the original premium minus 7%)
Eliminated the 28% hike entirely; net annual savings $14,800 on the policy
Zero security incidents in the 18 months since go-live
Firm's auditor noted the IR documentation as 'professional-grade' on the next AICPA peer review
Ready to see results like these?
Start with a free, no-obligation assessment of your current telecom and IT environment. We'll show you exactly where you can save money and improve performance.
Tell me what is on your mind. I review every message personally. My team and I reply within one business hour. No deck, no sales pitch.
About you
Your situation
1–49
50–100
100–250
250–500
500+
Within 30 days
1–3 months
3–6 months
Just exploring
Jonathan reads every submission personally. Reply within one business hour during business hours (8a–6p ET).
✅
Got it. I will read this personally.
You will hear from me within one business hour during business hours, or first thing the next business morning if it is after 6p ET. No deck, no sales pitch. Just a straight read on your situation.