Why Johns Creek firms are worth targeting
Criminals go where money and data are easy to reach. Johns Creek has both. The city's business base is heavy with medical practices, wealth managers, insurance agents, lenders, accountants and law offices. Each holds records that sell well or payments that can be redirected. Many of these firms have fewer than 20 people and nobody whose full-time job is security.
The FBI's Internet Crime Complaint Center logged 25,936 complaints from Georgia in 2025, and reported losses of about $534.6 million, ninth among the states. Nationwide, business email compromise accounted for 24,768 complaints and more than $3 billion in losses that year. The same report names health care among the sectors hit hardest by the leading ransomware groups. None of those numbers mean you will be hit. They do explain why insurers and regulators now ask harder questions.
What our cybersecurity work includes
- MFA on every account that matters: email, remote access, banking portals where possible and every admin login. We use phishing-resistant methods for admins and the people who approve payments.
- Email protection: filtering for phishing links, spoofed senders and malicious attachments, plus a report button staff can use when something feels off.
- Endpoint detection and response: software on each computer and server that watches behavior, not just known malware, and can cut a machine off the network when it sees encryption or credential theft.
- People reviewing alerts: warnings go to analysts who act on them, not to a mailbox nobody checks.
- Admin rights and accounts: few people with admin access, former staff disabled the day they leave, and a business password manager in place of spreadsheets.
- Network separation: guest Wi-Fi, cameras, smart TVs in the waiting room and medical devices kept away from the systems that hold records and money.
- Training: short lessons and test phishing emails based on the scams we actually see, such as fake closing instructions and spoofed payroll changes.
The rules your business may answer to
Cybersecurity in Johns Creek is often a compliance question as well as a technical one.
- Medical and dental offices fall under the HIPAA Security Rule. In January 2025 HHS proposed changes that would make controls such as MFA, encryption and asset inventories explicit requirements. We install those controls now and record them in a form your risk assessment can use.
- Tax preparers, mortgage brokers and other non-bank financial firms are covered by the FTC Safeguards Rule. Since May 2024 it has required notice to the FTC within 30 days of discovering a breach affecting 500 or more people.
- Registered investment advisers face the SEC's amended Regulation S-P, which requires a written incident response program and customer notice after certain breaches.
We are not your lawyer or your compliance officer. We handle the technical safeguards and give you the evidence: settings, logs, training records and test results.
Home offices and executives
With so many residents working from home, the weakest link is often a house, not an office. A partner checks client files on a shared family PC. A bookkeeper connects through an old router that hasn't been updated in years. We manage company laptops in the home the same way we manage them in the office, and we can secure the home network of an owner or executive who handles sensitive work there.
When something gets through
Suppose a mailbox is hijacked or a PC starts acting up. Our first move is to cut it off. Then we trace which files and messages were reached, change the right credentials and bring back clean copies. We help you work out who to call, including your insurer, your bank and, if needed, your lawyer. Having that plan written down before the bad day makes the first hours much calmer.
Getting started
A security review checks your Microsoft 365 settings and sign-in history, device protection, firewall, backups and admin accounts. The findings come back as a brief, ordered list written for an owner, not a scanner printout. Quick wins like company-wide MFA and shutting off outdated sign-in protocols are normally done within a couple of weeks. From then on, monitoring continues and each quarterly meeting includes a security update.
Questions about cybersecurity
We have antivirus. Why do we need more?
Antivirus looks for files it already knows are bad. Most break-ins at small firms use a real password that was phished or reused, and no bad file ever appears. MFA, mail filtering and behavior-based detection deal with that.
Can you help us answer our cyber insurance questionnaire?
Yes. We check each control the insurer asks about, tell you plainly which are really in place and close the missing ones, since a wrong answer on that form can come back to bite you after an incident.
