Signed HIPAA risk analyses for medical, dental, and behavioral health practices. Regulation S-P programs for investment advisers. Managed security for both, from Central Massachusetts.
A signed HIPAA Security Rule risk analysis and the Massachusetts WISP for healthcare practices. A fixed-fee Regulation S-P program for SEC-registered investment advisers. Both start with a read-only baseline of your Microsoft 365 or Google Workspace security settings.
For healthcare practicesFor investment advisersPatching, endpoint protection, tested backups, and account monitoring for the devices and accounts that hold patient and client data, reviewed by an engineer.
How managed security worksSaberGuard also offers infrastructure and engineering projects, vCISO advisory, policy writing, and vendor risk management. See all services
Each finding names the setting it came from and when it was observed, so you can show your work when someone asks.
With monitoring, Ward Agent re-reads your security settings every week. A disabled MFA policy shows up as a finding, not a surprise at next year's review.
Software flags possible findings. A credentialed reviewer reads each one and rejects what doesn't hold up before it reaches your report.
Behavioral health
A HIPAA security risk assessment found a therapist's client records in three places. SaberGuard moved all 21 charts into SimplePractice under a signed BAA, then rebuilt the security around them.
Read the story
Wealth management
SaberGuard is the virtual CISO for a registered investment adviser on CNBC's 2026 FA 100 list. It runs the firm's vendor due diligence, co-wrote its Regulation S-P documentation with the compliance officer, and leads the security projects its IT provider used to handle.
Read the storyA thirty-minute scoping call. You leave with a fixed fee and a start date.
SaberGuard assesses and advises; it does not warrant compliance.