# Insights

> Practical guides and regulatory explainers on security testing, compliance frameworks and AI risk, written by CyberAccord.

- [SOC 2 Type I vs Type II: which report do you need?](https://www.cyberaccord.com/insights/soc-2-type-1-vs-type-2): Type I tests control design on one date. Type II tests operation over a period. What each covers, when to choose which, and what buyers check.
- [What should a Microsoft 365 hardening baseline include?](https://www.cyberaccord.com/insights/microsoft-365-hardening-baseline): A Microsoft 365 hardening checklist for small and mid-sized firms, built on CISA's SCuBA baselines and Microsoft Learn guidance, with license notes.
- [What does the FTC Safeguards Rule require of small firms?](https://www.cyberaccord.com/insights/ftc-safeguards-rule-small-firms): Who the FTC Safeguards Rule covers, its nine required elements, what the under-5,000-consumer exemption removes, and the 30-day FTC breach notice.
- [Does the EU AI Act apply to a US SaaS company?](https://www.cyberaccord.com/insights/eu-ai-act-for-us-saas): What the EU AI Act requires of a US SaaS company as of October 2026, including the July 2026 amendments that moved the high-risk dates.
- [How do you answer customer security questionnaires well?](https://www.cyberaccord.com/insights/answering-security-questionnaires): How to answer SIG, CAIQ, HECVAT, and custom security questionnaires accurately: an answer library, the right evidence, honest gaps, and clear ownership.
- [What does ABA Model Rule 1.6(c) require of a law firm's security?](https://www.cyberaccord.com/insights/aba-rule-1-6-law-firm-security): How Model Rule 1.6(c), the Comment [18] factors and ABA Formal Opinions 477R, 483, 498 and 512 translate into a law firm security program.

## Contact CyberAccord

- Book a free consultation: https://www.cyberaccord.com/contact
- Phone: +1 (832) 429-5665
- Email: info@cyberaccord.com
- Office: 8990 Kirby Dr, Suite 220, Houston, TX 77054
- Hours: Monday to Friday, 9am to 5pm Central, by appointment