Industries
You’ve run fine for years without a single written policy.
So had everyone in the headlines. Pick what you run — each page is your story, told in your stack, with the paperwork that’s already on its way.
I run a restaurantToast or Square at the counter, QuickBooks for the books, Gmail for orders, one office PC that holds payroll — and cameras you can check from your phone.→I run a construction companyBids and drawings in email and a shared drive, QuickBooks, subcontractor W-9s with SSNs, lender draws moving six figures — crews in the field on their phones.→I run a financial or trust firmTrust accounting, beneficiary files full of PII, M365 email, a document server or portal — and a fiduciary duty attached to all of it.→I run a mortgage or lending shopLoan files: SSNs, bank statements, credit reports — in the LOS, in email, in scanned PDFs. Closing funds on a schedule everyone can learn.→I run a fintech or SaaS startupCloud everything, a small team that ships fast — and enterprise prospects whose procurement teams send 200-question security spreadsheets.→I run a medical practiceAn EHR, a billing service, front-desk email, and patient records that HIPAA has opinions about — plus the personal phones everyone actually uses.→I run a property management companyTenant applications — SSNs, pay stubs, background checks — arriving by email, rent flowing through a portal, owners' statements in a shared drive.→I run a shop that takes cardsA terminal from your processor, maybe online checkout, and — be honest — a notebook or spreadsheet somewhere with a regular's card number in it.→I run a one-person businessA laptop, a phone, Gmail or Outlook, QuickBooks, and cloud storage. You are also the IT department.→I run a growing businessMicrosoft 365 or Google Workspace, QuickBooks, a shared drive, ten-ish laptops, and a part-time IT person or an MSP.→I run a foreclosure or trustee operationCase files with borrower financials, court deadlines, lender relationships, and a SaaS platform that actually hosts the data — shared responsibility you're accountable for.→I run an IT services / MSP shopThe RMM agent on every client machine, delegated admin into their M365 tenants, a password vault holding everyone's keys, the ticketing system full of their data — you ARE the supply chain.→
See your own paperwork answered.
Bring a real questionnaire — an insurer's renewal, a client's spreadsheet, the processor's SAQ — and watch it answered from real policies, with citations.