What does Infosec Check do?
We deliver three connected practices: GRC & regulatory compliance, cyber insurance consulting, and Fractional CISO leadership.
FAQ
Frequently asked questions.
Answers to common questions about GRC, cyber insurance, and Fractional CISO engagements with Infosec Check.
Which frameworks do you support?
SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF, and FTC Safeguards are the most common. Others on request.
Are you a certifying body or auditor?
No. We prepare organizations for audit and coordinate with your chosen auditor. We are not an accredited certification body.
Are you an insurance broker?
No. We're technical advisors who work alongside your broker and underwriters to improve applications, controls, and renewal outcomes.
How is a Fractional CISO engagement structured?
Monthly retainer with a 6-month minimum, sized to committed hours per month, and scaled up during audits, incidents, or M&A events.
Do you work with startups?
Yes. Many engagements are Series A–C SaaS companies preparing for their first SOC 2 or enterprise contract.
Where are you located?
Infosec Check operates from the United States and serves clients across North America.
How do we start?
Speak with a GRC Advisor or send a note through the contact form. The first working session is scoped in 30 minutes.
How do we report a security issue on this site?
See our /.well-known/security.txt file or email security@infoseccheck.com.
Ready to talk?
Book a 30-minute working session or send us a note. We'll come prepared.