Category
SOC 2, HIPAA, CMMC, PCI-DSS, ISO 27001, audit prep, and control mapping for growing teams.
Compliance work is where many growing companies discover that security expectations have already arrived, whether the business feels ready or not. A customer questionnaire, cyber insurance renewal, investor diligence request, or a sales opportunity tied to SOC 2 can all force the issue at once. This category is built for that moment.
Filter and sort
Featured article
A practical walkthrough of cyber insurance for first-time SMB buyers in 2026 — what the policy covers, what the questionnaire asks.
Articles
What law firm cyber insurance actually covers in 2026, the underwriting questionnaire controls carriers review.
What the HIPAA Security Rule actually requires of dental practices in 2026 — risk analysis, administrative safeguards, MFA, encryption, breach response.
Why DSO and multi-location dental groups inherit the worst cybersecurity posture of their weakest practice.
Why multi-office firms and acquiring firms inherit the worst cybersecurity posture of their weakest office.
FAQ
No. The content explains security and compliance implementation from a hands-on operator perspective, not legal counsel.
Most articles are written for SMB operators, IT leads, and security owners who need audit-ready security without building a large internal compliance team.
Yes. Obsidian Ridge focuses on the overlaps and implementation realities across NIST, ISO 27001, PCI-DSS, HIPAA, and related obligations.
How small law firms actually protect attorney-client privileged communications, work product, and sealed court records in 2026.
A practical guide to SOC 2 readiness for small businesses, including what founders should do first, what to avoid.
