Free Resources, No Form Wall

Practical checklists you can read right here or print — the same ones we walk clients through. No gate, no sales call required. If you want new ones by email, that’s a box you can check, not a toll you have to pay.

Checklists & guides

Each opens as a clean, printable page — save it as a PDF from your browser’s print dialog.

These are the working documents, not brochures. They are the same checklists our engineers run during onboarding and the same ones we hand an auditor or an insurance underwriter when they ask what a client actually has in place. Nothing on this page asks for an email address, because a checklist you have to trade contact details for is a lead magnet, not a resource.

Use them however is useful. Walk your current provider through one and see how the conversation goes. Score yourself before a renewal. Take one into a cyber-⁠insurance application so you know which questions you can answer honestly before the form asks. If a line on any of them does not make sense for your business, that is worth a conversation rather than a guess — the free 30-⁠minute assessment exists for exactly that, and it is with the owner rather than a salesperson.

Live Security Briefing: Threats & IT Deadlines What’s being exploited right now (straight from CISA), curated attack stories with what-⁠it-⁠means takes, and the IT deadlines heading for your calendar. Read & print → Research Do OC Firms Block Fake Email? (2026) We read the public email settings of 319 Orange County law, CPA and escrow firms. Most haven’t switched on a key fake-⁠email protection. Read & print → Buying IT What Managed IT Costs in Orange County (2026) Published per-⁠user rates, monthly minimums, the add-⁠ons that change the bill, and a worked budget for a 20-⁠person office. Read & print → Buying IT Who Publishes IT Pricing in Orange County? (2026) Our August review of the ten most-⁠visible OC providers found two publishing complete rates, three ranges, five nothing. Plus a September update: more now publish. Read & print → Buying IT 12 Questions to Ask Any IT Provider The questions that separate a real security partner from a break-⁠fix shop — with what a good answer sounds like. Read & print → Microsoft 365 Microsoft MFA Retirement Checklist Microsoft retires its own SMS and voice delivery for MFA for most users on February 1, 2027. The six steps to move your team to passkeys before the blocking prompt arrives. Read & print → Insurance Cyber-⁠Insurance Readiness Checklist The controls insurers now require before they’ll bind or renew a policy — and how to avoid a denied claim. Read & print → Compliance FTC Safeguards Rule Checklist The nine required elements of a GLBA information security program, in plain English, for firms that handle financial data. Read & print → Compliance HIPAA Security Rule Checklist The administrative, physical, and technical safeguards a practice or business associate needs — and the evidence to show. Read & print →

Also in Resources

The checklists above are the printable ones. These are the rest of what we publish for people still working out what they need — no form wall on any of them either.

IT & Security Glossary

Plain-⁠English definitions for the acronyms that show up in quotes and insurance forms — EDR, MDR, SIEM, SASE, ITDR and the rest.

Open the glossary →

Incident Walkthroughs

Real engagements told step by step: what happened, what it cost, and what actually stopped it. Anonymized, because our clients’ names are theirs.

Read the walkthroughs →

Compare IT Options

Managed IT versus break-⁠fix, and in-⁠house versus outsourced — compared honestly, including the cases where the answer is not us.

Compare the models →

Trust & Security Center

How we secure our own house, what we will and will not publish about our stack, and why that discretion protects you rather than us.

See the trust center →

Switching to CRC

What changing providers actually involves — the overlap period, who talks to your outgoing provider, and the fast track that aims to stabilize urgent problems within 24–⁠72 hours.

How switching works →

IT Fit Quiz

Five questions, about sixty seconds. Shows which compliance frameworks are likely to apply to you and which plan fits.

Take the quiz →

Domain & Email Security Check

Reads the public DNS records for a domain you own or administer, plus the certificate its website presents, and shows how well it’s protected against forged email — SPF, DKIM, DMARC and certificate expiry. No signup.

Check a domain →

Windows 10 PC Check

One click tells you whether the PC you’re on runs Windows 10, and what the end of Year 1 security updates (October 13, 2026) means for a business PC. Runs in your browser; nothing is sent.

Check this PC →