Capstone puts documented security controls on every covered machine, watches them around the clock, and handles the day-to-day IT so your team can focus on the mission — a set monthly fee for the protection, published rates for hands-on work, and no rate you haven’t seen in writing.
Designed for nonprofit organizations with 2–50 staff that don’t employ internal IT.
The controls that FTC Safeguards, IRS Publication 4557 and your cyber insurer expect, put in place and documented for CPA, accounting and tax firms with no IT staff. Based in Springfield, serving Dayton and Columbus since 2004.
Book 15 minutes for written security findings
“I have worked with Brian over the past 20 years. He has always operated in a professional manner. Brian is a man of integrity and dependability.…” Steve S., CPA (Ohio)
Insurers, client contracts, and ethics rules expect strong safeguards for client files. This page outlines the controls and documentation used to support renewals, audits, and confidentiality obligations.
Built for Ohio law firms with no internal IT staff.
Capstone puts documented security controls on every covered machine, watches them around the clock, and handles the day-to-day IT so you don't have to — a set monthly fee for the protection, published rates for hands-on work, and no rate you haven't seen in writing.
Designed for professional services firms, retail operations, and light manufacturing businesses with 2–50 staff that don't employ internal IT.
Based in Springfield and on site across Dayton and Columbus, we have looked after Ohio small businesses since 2004.
Capstone keeps the records medical practices are expected to produce current throughout the year, not assembled at the deadline: access controls, training records, vendor/BAA tracking, and incident-ready timelines. The annual Security Risk Analysis is quoted as project work, and backup testing is a documented add-on.
Designed for independent and multi-physician practices (2–50 workforce members) that do not employ a full-time compliance officer or internal IT security team.
The protection is one set monthly fee. Hands-on work is billed at the published hourly rate, and the annual Security Risk Analysis and recovery testing are quoted separately, so you know both numbers before anyone schedules a call.
Based in Springfield, on site across Dayton and Columbus, serving Ohio practices since 2004. One practice manager who has worked with us since 2013: “He is always readily available to help out and answer questions.” Jodi J., Practice Manager, Vascular Surgery Clinics
A 15-minute call, then written findings on five areas. No cost.
