.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
Do You Need a QSA? How to Choose the Right Assessor for Your Firm
by Patrick Hughes on August 11, 2026 at 12:15 PM
If your business stores, processes, or transmits cardholder data, you have almost certainly come across the term QSA. But whether you actually need to hire one, and how to pick a good one if you do, is not always clear. This guide breaks down what a Qualified Security Assessor does, w …
How to Define Your Cardholder Data Environment (CDE) Under PCI DSS
by Patrick Hughes on June 28, 2026 at 1:30 PM
%20Under%20PCI%20DSS.jpg)
Before an organization can implement Payment Card Industry Data Security Standard (PCI DSS) controls, it must answer a foundational question: what is in scope? The answer lies in the definition of the Cardholder Data Environment (CDE). Get it wrong, and everything built on top of it i …
When to Hire a PCI Compliance Consultant (and What They Actually Do)
by Patrick Hughes on June 25, 2026 at 4:17 PM
.jpg)
If your business stores, processes, or transmits cardholder data, PCI DSS compliance isn't optional. But knowing that you need to comply is a very different thing from knowing how to actually get there. Somewhere between your first self-assessment questionnaire and your first failed s …
Staying HIPAA Compliant While Leveraging Telehealth
by Patrick Hughes on March 13, 2024 at 3:00 PM
In the rapidly evolving landscape of healthcare, telehealth has emerged as a pivotal technology, offering unprecedented convenience and accessibility to patients and providers alike. However, as healthcare organizations increasingly adopt these digital health services, the imperative …
10 Tips for Choosing a Managed Service Provider (MSP)
by Patrick Hughes on October 18, 2023 at 1:00 PM
In today's fast-paced digital landscape, mastering IT management is a make-or-break deal for businesses, big and small. Wrangling your IT infrastructure can be a formidable task, draining resources and headspace.
HIPAA Compliance – Understanding Basic Best Practices
by Patrick Hughes on March 7, 2023 at 2:30 PM
.jpg)
Health Insurance Portability and Accountability Act (HIPAA) compliance is a critical facet of any healthcare organization's security measures. It is essential for businesses to take proactive steps to ensure that they comply with the regulations set forth by HIPAA. To help ensure comp …