You have a small agency and are tackling IT without much  specific experience in the IT field. You still have some work to do with meeting much of the requirements you have and might be missing some best practices.

You decide you want a little extra help for the first year, but you have to keep the budget as low as possible.

Package Recommendation: Consider the Secure My Agency core program to keep the costs low and optimize the time in the office hours and workshops to get help when you need it.

You can always add consulting help for periods when you have a lot of questions. And, either dial back or cancel the service when you're not using it to keep the cost low.

However, because you may need more help (especially in the first year), consider the extra consulting or software with the annual options to get more out of the reduced cost and know you'll use it.

You have a mid-sized agency and are experienced in IT, that's your main job responsibility. You've tackled a lot of the common best practices but need some help with creating a formal program that addresses your data security requirements. 

You don't need much help but would like a nudge in the right direction and questions come up occasionally.

Package Recommendation: Consider the Secure My Agency with Consulting option and use the private engagement to address questions that build up each month and to get strategies for tackling this on top of other projects. You can always drop into office hours or use other resources to build your knowledge and get help.

You have a mid-sized agency and are bumping into more and more requirements. You've tackled a lot of the common best practices and have been working on compliance with a few potential gaps.

Due to the amount of requirements and requests, you want to be a little more organized and have a plan for how to manage everything on an annual, repeatable cycle.

Package Recommendation: Consider the Secure My Agency with Consulting & Software option so you can get access to compliance technology that helps you be better organized, measure risks, and demonstrate compliance. Use the consulting time for help with the system and other questions you have related to your projects.

This program is designed for anyone involved in implementing or planning cybersecurity and compliance efforts in independent insurance agencies.

It is intended for all levels of experience and all forms of IT, whether you handle it in-house or with a 3rd party.

You will learn how to understand, identify, and address cyber risk, as well as compliance requirements that need to be a part of your agency's cyber program.

The program also provides resources, guides, and more to help you implement what you've learned as you secure your agency and meet requirements.

To continue your learning experience, we are constantly adding more and more content through live engagements and off-line access to our team.

It's always running, you can jump in at any time!

As you get access, you can begin the course work to begin learning. 

Live events are happening on a regular basis but subscribers will have access to all past events.

The program is set up for you to cancel at any time through our monthly subscription. You are always welcome back if you decide to take a break.

However, this program is continuous and ongoing; meaning there's always something we're adding to keep increasing its value to members.

This includes regular events and access to RLS Consulting for help you:

Sell More Cyber Program members can get help working on prospects and deals from us while continuing to stay ahead of the competition by building their knowledge each month.

Secure My Agency Program members get help with cybersecurity and compliance projects, and the ongoing effort required to keep momentum.

No, this is not really possible for a few reasons (you'll find this with IT and Cybersecurity vendors too, so this is good to understand - especially if someone is overpromising what they can deliver).

Here's why, and some added clarity on what we can deliver:

First, for many requirements like the ones agencies commonly fall under, there is not a certification process to align with. Some entities may offer a certificate that you completed their program, but that's not typically recognized by regulators - they rely on an audit of what you said you would do and what you actually did (it's usually after something has triggered an audit that this happens, it's not often proactively done).

Secondly, we can't verify you implemented everything the way your internal or external IT team would. And, even still, in some cases it may be necessary to complete a gap audit or assessment from a 3rd party firm (sometimes you can't have the person that built the program check their own work). We can introduce you to vendors that provide these services and the workshop does provide resources and guidance on how to find the right 3rd party to help you.

And, last, cybersecurity and compliance are practices you have to keep constant progress on - as you'll learn through the course content. Also mentioned in the course, there is no such thing as a truly 'secure' environment, there is always risk - which is why everyone has to still have a good plan for what to do if something goes wrong.

What we can promise:

We can introduce you to the requirements you need to know about so you can work with your legal counsel to identify the requirements you wish to meet.

We can show you cybersecurity and compliance frameworks (industry recognized standards), and work with you as you implement them and document what you have done.

We will help provide resources to make this work more manageable and help you keep on track with the ongoing efforts.

When we can't help with something that needs another vendor, we will be clear about the limitation and help you set criteria to find the right vendor.

Possibly. There are some things that you may need or want to do that would require a certified professional or validation/testing from one.

In the program, we'll work with you to help you determine what steps to take.

When vendors are needed, we have people we can recommend as well as resources to help you select the right one for your needs.

RLS Consulting is a firm dedicated to helping sales people handle difficult conversations around cyber risk. We also help companies understand their own risk and what to do about it.

Our experience comes from extensive work in cybersecurity sales over the last decade where we worked closely with the independent insurance agency channel.

The lessons learned over the years are now being shared through the "Simplifying Cyber Risk", "Selling for Cyber Risk", and "Agency Security & Compliance" courses as well as the related programs.

This started as a means to train our insurance partners and help their own sales grow as we helped them secure their agency, and has since evolved into a full fledged program.

Learn more about RLS on our full site, https://rlsconsulting.co, where you can find additional services, resources, and more!