# Compliance readiness and gap assessments

> CyberAccord prepares organizations for security and privacy frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF and SP 800-171, GDPR and CCPA, NYDFS Part 500, the FTC Safeguards Rule and the EU AI Act. We run the gap assessment, build the remediation plan and documentation, and support you through the independent audit.

- [SOC 2](https://www.cyberaccord.com/compliance/soc-2): SOC 2 readiness and renewal: gap assessment, controls, policies and evidence, prepared for your independent CPA firm's audit.
- [ISO 27001](https://www.cyberaccord.com/compliance/iso-27001): ISO/IEC 27001:2022 readiness: ISMS design, risk assessment, Annex A controls and preparation for an accredited certification audit.
- [HIPAA](https://www.cyberaccord.com/compliance/hipaa): HIPAA Security Rule compliance: risk analysis, gap assessment, security policies and remediation planning for covered entities and business associates.
- [PCI DSS](https://www.cyberaccord.com/compliance/pci-dss): PCI DSS v4.0.1 readiness: cardholder data scoping, control gap analysis, SAQ support and preparation for a Qualified Security Assessor.
- [NIST](https://www.cyberaccord.com/compliance/nist): NIST gap assessments against CSF 2.0, SP 800-171 and SP 800-53, with scored findings and a prioritized remediation plan.
- [Data Privacy](https://www.cyberaccord.com/compliance/data-privacy): Data privacy compliance for GDPR and CCPA/CPRA, including data mapping, gap assessment, security controls and Data Protection Impact Assessments.
- [NYDFS 500](https://www.cyberaccord.com/compliance/nydfs-500): NYDFS 23 NYCRR Part 500 compliance: risk assessment, policies, CISO support, incident response and annual compliance filing preparation.
- [EU AI Act](https://www.cyberaccord.com/compliance/eu-ai-act): EU AI Act readiness: provider and deployer classification, risk-tier mapping, gap analysis and a roadmap aligned to the Act's phased dates.
- [FTC Safeguards Rule](https://www.cyberaccord.com/compliance/ftc-safeguards-rule): FTC Safeguards Rule compliance: written risk assessment and security program, MFA and encryption, testing, and FTC breach-notice readiness.

## Contact CyberAccord

- Book a free consultation: https://www.cyberaccord.com/contact
- Phone: +1 (832) 429-5665
- Email: info@cyberaccord.com
- Office: 8990 Kirby Dr, Suite 220, Houston, TX 77054
- Hours: Monday to Friday, 9am to 5pm Central, by appointment