--- title: MA 201 CMR 17 Compliance Services | Compass IT Compliance description: Our MA 201 CMR 17 Services evaluate 20 separate control objectives to understand how your organization is adhering to the requirements of MA 201 CMR 17. image: https://www.compassitc.com/hubfs/Compass%20IT%20Compliance%20-%20Website%20Featured%20Image.jpg --- [![Compass IT Compliance](https://www.compassitc.com/hs-fs/hubfs/Compass%20white%20blue%20transparent%202%20website.png?width=313&height=76&name=Compass%20white%20blue%20transparent%202%20website.png "Compass IT Compliance")](https://www.compassitc.com/) [![Contact Us](https://no-cache.hubspot.com/cta/default/448486/0cd96c7a-3da8-4e9a-aaa6-8321e72dfaa3.png)](https://cta-redirect.hubspot.com/cta/redirect/448486/0cd96c7a-3da8-4e9a-aaa6-8321e72dfaa3) ** ** ** #### [![Penetration Testing](https://www.compassitc.com/hs-fs/hubfs/target%20(1).png?width=58&height=58&name=target%20(1).png)](https://www.compassitc.com/services/penetration-testing)   ##### [**Penetration Testing**](https://www.compassitc.com/services/penetration-testing) [Proactively identify and attempt to exploit critical vulnerabilities, drawing remediation insights prior to a real-world attack](https://www.compassitc.com/services/penetration-testing) #### [![loupe](https://www.compassitc.com/hs-fs/hubfs/loupe.png?width=58&height=58&name=loupe.png)](https://www.compassitc.com/services/vulnerability-management)   ##### [**Vulnerability Management**](https://www.compassitc.com/services/vulnerability-management) [Detect, categorize, and score vulnerabilities existing in your organization’s website, applications, network, or devices](https://www.compassitc.com/services/vulnerability-management) #### [![employee](https://www.compassitc.com/hs-fs/hubfs/employee.png?width=58&height=58&name=employee.png)](https://www.compassitc.com/services/virtual-ciso)   ##### [**Virtual CISO (vCISO)**](https://www.compassitc.com/services/virtual-ciso) [Leverage a team of veteran security professionals full or part-time to identify risks and enhance your security program](https://www.compassitc.com/services/virtual-ciso)          #### [![court](https://www.compassitc.com/hs-fs/hubfs/court.png?width=58&height=58&name=court.png)](https://www.compassitc.com/services/compliance)   ##### [Compliance](https://www.compassitc.com/services/compliance) [Achieve and maintain compliance with the state, federal, and industry regulations and frameworks required for your organization](https://www.compassitc.com/services/compliance) #### [![secure-shield](https://www.compassitc.com/hs-fs/hubfs/secure-shield.png?width=58&height=58&name=secure-shield.png)](https://www.compassitc.com/services/risk-business-resiliency)   ##### [**Risk & Business Resiliency**](https://www.compassitc.com/services/risk-business-resiliency) [Assess your organization’s present risk level and develop policies, procedures, programs, and plans to mitigate risks identified](https://www.compassitc.com/services/risk-business-resiliency) #### [![artificial-intelligence](https://www.compassitc.com/hs-fs/hubfs/artificial-intelligence.png?width=58&height=58&name=artificial-intelligence.png)](https://www.compassitc.com/services/social-engineering-awareness)   ##### [**Social Engineering & Awareness**](https://www.compassitc.com/services/social-engineering-awareness) [Foster security awareness among your team and simulate real-world attack scenarios to assess the effectiveness of training](https://www.compassitc.com/services/social-engineering-awareness)          #### [![cloud-computing](https://www.compassitc.com/hs-fs/hubfs/cloud-computing.png?width=58&height=58&name=cloud-computing.png)](https://www.compassitc.com/services/cloud-security)   ##### [**Cloud Security**](https://www.compassitc.com/services/cloud-security) [Evaluate your organization’s cloud infrastructure attack surface, identifying vulnerabilities in controls and configurations](https://www.compassitc.com/services/cloud-security) #### [![Cybersecurity Services](https://www.compassitc.com/hs-fs/hubfs/malware-1.png?width=62&name=malware-1.png)](https://www.compassitc.com/services/incident-response-forensics)   ##### [Incident Response & Forensics](https://www.compassitc.com/services/incident-response-forensics) [Determine the extent of a compromise, create a plan to keep damage under control, and preserve evidence for further investigation](https://www.compassitc.com/services/incident-response-forensics) #### [![copy-writing](https://www.compassitc.com/hs-fs/hubfs/copy-writing.png?width=58&height=58&name=copy-writing.png)](https://www.compassitc.com/services/white-label)   ##### [**White Label Security Services**](https://www.compassitc.com/services/white-label) [Provide quality security services to your clients to expand your service offerings while our experts work under your brand name](https://www.compassitc.com/services/white-label) #### [![Financial Services](https://www.compassitc.com/hs-fs/hubfs/money.png?width=48&name=money.png)](https://www.compassitc.com/industries/financial-services)   ##### [**Financial Services**](https://www.compassitc.com/industries/financial-services) [Banks, credit unions, insurance, processors](https://www.compassitc.com/industries/financial-services) #### [![Gaming](https://www.compassitc.com/hs-fs/hubfs/slot-machine%20(1).png?width=63&name=slot-machine%20(1).png)](https://www.compassitc.com/industries/gaming)   ##### [Gaming](https://www.compassitc.com/industries/hospitality) [Casinos, lottery services, online gambling](https://www.compassitc.com/industries/hospitality) #### [![Government](https://www.compassitc.com/hs-fs/hubfs/capitol-1.png?width=58&name=capitol-1.png)](https://www.compassitc.com/industries/government)   ##### [**Government**](https://www.compassitc.com/industries/government) [State, local, and tribal government agencies](https://www.compassitc.com/industries/government)          #### [![Healthcare](https://www.compassitc.com/hs-fs/hubfs/doctor-1.png?width=48&name=doctor-1.png)](https://www.compassitc.com/industries/healthcare)   ##### [**Healthcare**](https://www.compassitc.com/industries/healthcare) [Hospitals, clinics, pharmaceuticals](https://www.compassitc.com/industries/healthcare) #### [![Higher Education](https://www.compassitc.com/hs-fs/hubfs/graduation-2.png?width=64&name=graduation-2.png)](https://www.compassitc.com/industries/higher-education)   ##### [**Higher Education**](https://www.compassitc.com/industries/higher-education) [Colleges, universities, online schools](https://www.compassitc.com/industries/higher-education) #### [![Hospitality](https://www.compassitc.com/hs-fs/hubfs/travelling.png?width=56&name=travelling.png)](https://www.compassitc.com/industries/hospitality)   ##### [**Hospitality**](https://www.compassitc.com/industries/hospitality) [Hotels, restaurants, entertainment, tourism](https://www.compassitc.com/industries/hospitality)          #### [![Manufacturing](https://www.compassitc.com/hs-fs/hubfs/factory%20(1).png?width=58&name=factory%20(1).png)](https://www.compassitc.com/industries/manufacturing)   ##### [**Manufacturing**](https://www.compassitc.com/industries/manufacturing) [Transforming materials into finished products](https://www.compassitc.com/industries/manufacturing) #### [![Nonprofit](https://www.compassitc.com/hs-fs/hubfs/heart-2.png?width=57&name=heart-2.png)](https://www.compassitc.com/industries/nonprofit)   ##### [**Nonprofit**](https://www.compassitc.com/industries/nonprofit) [Charities, museums, religious institutions](https://www.compassitc.com/industries/nonprofit) #### [![Retail](https://www.compassitc.com/hs-fs/hubfs/shopping-cart-2.png?width=58&name=shopping-cart-2.png)](https://www.compassitc.com/industries/retail)   ##### [**Retail**](https://www.compassitc.com/industries/retail) [Brick-and-mortar stores, online shopping](https://www.compassitc.com/industries/retail)          #### [![Technology](https://www.compassitc.com/hs-fs/hubfs/drive.png?width=56&name=drive.png)](https://www.compassitc.com/industries/technology)   ##### [**Technology**](https://www.compassitc.com/industries/technology) [Technology-based products and services](https://www.compassitc.com/industries/technology) #### [![Utilities](https://www.compassitc.com/hs-fs/hubfs/water-2.png?width=61&name=water-2.png)](https://www.compassitc.com/industries/utilities)   ##### [**Utilities**](https://www.compassitc.com/blog/protecting-scada-systems-from-cyber-attacks) [Electricity, gas, water, sewage, transportation](https://www.compassitc.com/blog/protecting-scada-systems-from-cyber-attacks)          #### [![Case Studies](https://www.compassitc.com/hs-fs/hubfs/search.png?width=58&name=search.png)](https://www.compassitc.com/resources/case-studies)   ##### [**Case Studies**](https://www.compassitc.com/resources/case-studies) [In-depth investigations into our engagements](https://www.compassitc.com/resources/case-studies) #### [![Datasheets](https://www.compassitc.com/hs-fs/hubfs/marketing-1.png?width=55&name=marketing-1.png)](https://www.compassitc.com/resources/datasheets)   ##### [**Datasheets**](https://www.compassitc.com/resources/datasheets) [Detailed summaries of the services we offer](https://www.compassitc.com/resources/datasheets) #### [![eBooks & Checklists](https://www.compassitc.com/hs-fs/hubfs/study-2.png?width=65&name=study-2.png)](https://www.compassitc.com/resources/files)   ##### [**eBooks & Checklists**](https://www.compassitc.com/resources/files) [Downloadable files to help mitigate your risks](https://www.compassitc.com/resources/files)          #### [![Industry News](https://www.compassitc.com/hs-fs/hubfs/radio-1.png?width=61&name=radio-1.png)](https://www.compassitc.com/resources/it-news)   ##### [Industry News](https://www.compassitc.com/blog) [Recent cybersecurity and compliance news](https://www.compassitc.com/blog) #### [![Webinars & Videos](https://www.compassitc.com/hs-fs/hubfs/video-camera.png?width=68&name=video-camera.png)](https://www.compassitc.com/resources/videos)   ##### [**Webinars & Videos**](https://www.compassitc.com/resources/videos) [Video content produced by our experts](https://www.compassitc.com/resources/videos)          #### [![About Us](https://www.compassitc.com/hs-fs/hubfs/finger%20(1).png?width=58&name=finger%20(1).png)](https://www.compassitc.com/company/about)   ##### [**About Us**](https://www.compassitc.com/company/about) [Learn more about our story and mission](https://www.compassitc.com/company/about) #### [![Career Opportunities](https://www.compassitc.com/hs-fs/hubfs/profile-1.png?width=65&name=profile-1.png)](https://www.compassitc.com/company/career-opportunities)   ##### [**Career Opportunities**](https://www.compassitc.com/company/career-opportunities) [Explore career opportunities and apply today](https://www.compassitc.com/company/career-opportunities) #### [![Certifications](https://www.compassitc.com/hs-fs/hubfs/certificate.png?width=62&name=certificate.png)](https://www.compassitc.com/company/certifications)   ##### [**Certifications**](https://www.compassitc.com/company/certifications) [Industry-leading certifications and education](https://www.compassitc.com/company/certifications)          #### [![Community](https://www.compassitc.com/hs-fs/hubfs/heart.png?width=62&name=heart.png)](https://www.compassitc.com/company/community)   ##### [**Community**](https://www.compassitc.com/company/community) [See how we give back to the community](https://www.compassitc.com/company/community) #### [![Events](https://www.compassitc.com/hs-fs/hubfs/calendar.png?width=58&name=calendar.png)](https://www.compassitc.com/company/events)   ##### [**Events**](https://www.compassitc.com/company/events) [Upcoming conferences and webinars](https://www.compassitc.com/company/events) #### [![Meet the Team](https://www.compassitc.com/hs-fs/hubfs/man.png?width=64&name=man.png)](https://www.compassitc.com/company/team) ##### [**Meet the Team**](https://www.compassitc.com/company/team) [Meet our executive team of experts](https://www.compassitc.com/company/team)          #### [![Press Releases](https://www.compassitc.com/hs-fs/hubfs/news.png?width=58&name=news.png)](https://www.compassitc.com/company/press)   ##### [**Press Releases**](https://www.compassitc.com/company/press) [Major company news and announcements](https://www.compassitc.com/company/press) #### [![Request a Speaker](https://www.compassitc.com/hs-fs/hubfs/mic.png?width=58&name=mic.png)](https://www.compassitc.com/company/events/speaking)   ##### [Request a Speaker](https://www.compassitc.com/contact) [Request our experts to speak at your event](https://www.compassitc.com/contact) #### [![Testimonials](https://www.compassitc.com/hs-fs/hubfs/review%20(1).png?width=58&name=review%20(1).png)](https://www.compassitc.com/company/testimonials)   ##### [Testimonials](https://www.compassitc.com/resources/case-studies) [Hear what others have to say about us](https://www.compassitc.com/resources/case-studies) [![Compass IT Compliance](https://www.compassitc.com/hs-fs/hubfs/Compass%20regular%20transparent%20website.png?width=313&height=76&name=Compass%20regular%20transparent%20website.png "Compass IT Compliance")](https://www.compassitc.com/) [![Contact Us](https://no-cache.hubspot.com/cta/default/448486/4c0e33af-8e45-4582-aae2-74dbbe317cdd.png)](https://cta-redirect.hubspot.com/cta/redirect/448486/4c0e33af-8e45-4582-aae2-74dbbe317cdd) ** #### [![Penetration Testing](https://www.compassitc.com/hs-fs/hubfs/target%20(1).png?width=58&height=58&name=target%20(1).png)](https://www.compassitc.com/services/penetration-testing)   ##### [**Penetration Testing**](https://www.compassitc.com/services/penetration-testing) [Proactively identify and attempt to exploit critical vulnerabilities, drawing remediation insights prior to a real-world attack](https://www.compassitc.com/services/penetration-testing) #### [![loupe](https://www.compassitc.com/hs-fs/hubfs/loupe.png?width=58&height=58&name=loupe.png)](https://www.compassitc.com/services/vulnerability-management)   ##### [**Vulnerability Management**](https://www.compassitc.com/services/vulnerability-management) [Detect, categorize, and score vulnerabilities existing in your organization’s website, applications, network, or devices](https://www.compassitc.com/services/vulnerability-management) #### [![employee](https://www.compassitc.com/hs-fs/hubfs/employee.png?width=58&height=58&name=employee.png)](https://www.compassitc.com/services/virtual-ciso)   ##### [**Virtual CISO (vCISO)**](https://www.compassitc.com/services/virtual-ciso) [Leverage a team of veteran security professionals full or part-time to identify risks and enhance your security program](https://www.compassitc.com/services/virtual-ciso)          #### [![court](https://www.compassitc.com/hs-fs/hubfs/court.png?width=58&height=58&name=court.png)](https://www.compassitc.com/services/compliance)   ##### [Compliance](https://www.compassitc.com/services/compliance) [Achieve and maintain compliance with the state, federal, and industry regulations and frameworks required for your organization](https://www.compassitc.com/services/compliance) #### [![secure-shield](https://www.compassitc.com/hs-fs/hubfs/secure-shield.png?width=58&height=58&name=secure-shield.png)](https://www.compassitc.com/services/risk-business-resiliency)   ##### [**Risk & Business Resiliency**](https://www.compassitc.com/services/risk-business-resiliency) [Assess your organization’s present risk level and develop policies, procedures, programs, and plans to mitigate risks identified](https://www.compassitc.com/services/risk-business-resiliency) #### [![artificial-intelligence](https://www.compassitc.com/hs-fs/hubfs/artificial-intelligence.png?width=58&height=58&name=artificial-intelligence.png)](https://www.compassitc.com/services/social-engineering-awareness)   ##### [**Social Engineering & Awareness**](https://www.compassitc.com/services/social-engineering-awareness) [Foster security awareness among your team and simulate real-world attack scenarios to assess the effectiveness of training](https://www.compassitc.com/services/social-engineering-awareness)          #### [![cloud-computing](https://www.compassitc.com/hs-fs/hubfs/cloud-computing.png?width=58&height=58&name=cloud-computing.png)](https://www.compassitc.com/services/cloud-security)   ##### [**Cloud Security**](https://www.compassitc.com/services/cloud-security) [Evaluate your organization’s cloud infrastructure attack surface, identifying vulnerabilities in controls and configurations](https://www.compassitc.com/services/cloud-security) #### [![Cybersecurity Services](https://www.compassitc.com/hs-fs/hubfs/malware-1.png?width=62&name=malware-1.png)](https://www.compassitc.com/services/incident-response-forensics)   ##### [Incident Response & Forensics](https://www.compassitc.com/services/incident-response-forensics) [Determine the extent of a compromise, create a plan to keep damage under control, and preserve evidence for further investigation](https://www.compassitc.com/services/incident-response-forensics) #### [![copy-writing](https://www.compassitc.com/hs-fs/hubfs/copy-writing.png?width=58&height=58&name=copy-writing.png)](https://www.compassitc.com/services/white-label)   ##### [**White Label Security Services**](https://www.compassitc.com/services/white-label) [Provide quality security services to your clients to expand your service offerings while our experts work under your brand name](https://www.compassitc.com/services/white-label) #### [![Financial Services](https://www.compassitc.com/hs-fs/hubfs/money.png?width=48&name=money.png)](https://www.compassitc.com/industries/financial-services)   ##### [**Financial Services**](https://www.compassitc.com/industries/financial-services) [Banks, credit unions, insurance, processors](https://www.compassitc.com/industries/financial-services) #### [![Gaming](https://www.compassitc.com/hs-fs/hubfs/slot-machine%20(1).png?width=63&name=slot-machine%20(1).png)](https://www.compassitc.com/industries/gaming)   ##### [**Gaming**](https://www.compassitc.com/industries/hospitality) [Casinos, lottery services, online gambling](https://www.compassitc.com/industries/hospitality) #### [![Government](https://www.compassitc.com/hs-fs/hubfs/capitol-1.png?width=58&name=capitol-1.png)](https://www.compassitc.com/industries/government)   ##### [**Government**](https://www.compassitc.com/industries/government) [State, local, and tribal government agencies](https://www.compassitc.com/industries/government)          #### [![Healthcare](https://www.compassitc.com/hs-fs/hubfs/doctor-1.png?width=48&name=doctor-1.png)](https://www.compassitc.com/industries/healthcare)   ##### [**Healthcare**](https://www.compassitc.com/industries/healthcare) [Hospitals, clinics, pharmaceuticals](https://www.compassitc.com/industries/healthcare) #### [![Higher Education](https://www.compassitc.com/hs-fs/hubfs/graduation-2.png?width=64&name=graduation-2.png)](https://www.compassitc.com/industries/higher-education)   ##### [**Higher Education**](https://www.compassitc.com/industries/higher-education) [Colleges, universities, online schools](https://www.compassitc.com/industries/higher-education) #### [![Hospitality](https://www.compassitc.com/hs-fs/hubfs/travelling.png?width=56&name=travelling.png)](https://www.compassitc.com/industries/hospitality)   ##### [**Hospitality**](https://www.compassitc.com/industries/hospitality) [Hotels, restaurants, entertainment, tourism](https://www.compassitc.com/industries/hospitality)          #### [![Manufacturing](https://www.compassitc.com/hs-fs/hubfs/factory%20(1).png?width=58&name=factory%20(1).png)](https://www.compassitc.com/industries/manufacturing)   ##### [**Manufacturing**](https://www.compassitc.com/industries/manufacturing) [Transforming materials into finished products](https://www.compassitc.com/industries/manufacturing) #### [![Nonprofit](https://www.compassitc.com/hs-fs/hubfs/heart-2.png?width=57&name=heart-2.png)](https://www.compassitc.com/industries/nonprofit)   ##### [**Nonprofit**](https://www.compassitc.com/industries/nonprofit) [Charities, museums, religious institutions](https://www.compassitc.com/industries/nonprofit) #### [![Retail](https://www.compassitc.com/hs-fs/hubfs/shopping-cart-2.png?width=58&name=shopping-cart-2.png)](https://www.compassitc.com/industries/retail)   ##### [**Retail**](https://www.compassitc.com/industries/retail) [Brick-and-mortar stores, online shopping](https://www.compassitc.com/industries/retail)          #### [![Technology](https://www.compassitc.com/hs-fs/hubfs/drive.png?width=56&name=drive.png)](https://www.compassitc.com/industries/technology)   ##### [**Technology**](https://www.compassitc.com/industries/technology) [Technology-based products and services](https://www.compassitc.com/industries/technology) #### [![Utilities](https://www.compassitc.com/hs-fs/hubfs/water-2.png?width=61&name=water-2.png)](https://www.compassitc.com/industries/utilities)   ##### [**Utilities**](https://www.compassitc.com/blog/protecting-scada-systems-from-cyber-attacks) [Electricity, gas, water, sewage, transportation](https://www.compassitc.com/blog/protecting-scada-systems-from-cyber-attacks)          #### [![Case Studies](https://www.compassitc.com/hs-fs/hubfs/search.png?width=58&name=search.png)](https://www.compassitc.com/resources/case-studies)   ##### [**Case Studies**](https://www.compassitc.com/resources/case-studies) [In-depth investigations into our engagements](https://www.compassitc.com/resources/case-studies) #### [![Datasheets](https://www.compassitc.com/hs-fs/hubfs/marketing-1.png?width=55&name=marketing-1.png)](https://www.compassitc.com/resources/datasheets)   ##### [**Datasheets**](https://www.compassitc.com/resources/datasheets) [Detailed summaries of the services we offer](https://www.compassitc.com/resources/datasheets) #### [![eBooks & Checklists](https://www.compassitc.com/hs-fs/hubfs/study-2.png?width=65&name=study-2.png)](https://www.compassitc.com/resources/files)   ##### [**eBooks & Checklists**](https://www.compassitc.com/resources/files) [Downloadable files to help mitigate your risks](https://www.compassitc.com/resources/files)          #### [![Industry News](https://www.compassitc.com/hs-fs/hubfs/radio-1.png?width=61&name=radio-1.png)](https://www.compassitc.com/resources/it-news)   ##### [**Industry News**](https://www.compassitc.com/blog) [Recent cybersecurity and compliance news](https://www.compassitc.com/blog) #### [![Webinars & Videos](https://www.compassitc.com/hs-fs/hubfs/video-camera.png?width=68&name=video-camera.png)](https://www.compassitc.com/resources/videos)   ##### [**Webinars & Videos**](https://www.compassitc.com/resources/videos) [Video content produced by our experts](https://www.compassitc.com/resources/videos)          #### [![About Us](https://www.compassitc.com/hs-fs/hubfs/finger%20(1).png?width=58&name=finger%20(1).png)](https://www.compassitc.com/company/about)   ##### [**About Us**](https://www.compassitc.com/company/about) [Learn more about our story and mission](https://www.compassitc.com/company/about) #### [![Career Opportunities](https://www.compassitc.com/hs-fs/hubfs/profile-1.png?width=65&name=profile-1.png)](https://www.compassitc.com/company/career-opportunities)   ##### [**Career Opportunities**](https://www.compassitc.com/company/career-opportunities) [Explore career opportunities and apply today](https://www.compassitc.com/company/career-opportunities) #### [![Certifications](https://www.compassitc.com/hs-fs/hubfs/certificate.png?width=62&name=certificate.png)](https://www.compassitc.com/company/certifications)   ##### [**Certifications**](https://www.compassitc.com/company/certifications) [Industry-leading certifications and education](https://www.compassitc.com/company/certifications)          #### [![Community](https://www.compassitc.com/hs-fs/hubfs/heart.png?width=62&name=heart.png)](https://www.compassitc.com/company/community)   ##### [**Community**](https://www.compassitc.com/company/community) [See how we give back to the community](https://www.compassitc.com/company/community) #### [![Events](https://www.compassitc.com/hs-fs/hubfs/calendar.png?width=58&name=calendar.png)](https://www.compassitc.com/company/events)   ##### [**Events**](https://www.compassitc.com/company/events) [Upcoming conferences and webinars](https://www.compassitc.com/company/events) #### [![Meet the Team](https://www.compassitc.com/hs-fs/hubfs/man.png?width=64&name=man.png)](https://www.compassitc.com/company/team) ##### [**Meet the Team**](https://www.compassitc.com/company/team) [Meet our executive team of experts](https://www.compassitc.com/company/team)          #### [![Press Releases](https://www.compassitc.com/hs-fs/hubfs/news.png?width=58&name=news.png)](https://www.compassitc.com/company/press)   ##### [**Press Releases**](https://www.compassitc.com/company/press) [Major company news and announcements](https://www.compassitc.com/company/press) #### [![Request a Speaker](https://www.compassitc.com/hs-fs/hubfs/mic.png?width=58&name=mic.png)](https://www.compassitc.com/company/events/speaking)   ##### [**Request a Speaker**](https://www.compassitc.com/contact) [Request our experts to speak at your event](https://www.compassitc.com/contact) #### [![Testimonials](https://www.compassitc.com/hs-fs/hubfs/review%20(1).png?width=58&name=review%20(1).png)](https://www.compassitc.com/company/testimonials)   ##### [**Testimonials**](https://www.compassitc.com/resources/case-studies) [Hear what others have to say about us](https://www.compassitc.com/resources/case-studies) Search **Menu** ** ** [![Contact Us](https://no-cache.hubspot.com/cta/default/448486/2a197173-a0cf-4c39-9247-13d96c789ca6.png)](https://cta-redirect.hubspot.com/cta/redirect/448486/2a197173-a0cf-4c39-9247-13d96c789ca6) ![Compliance Services](https://www.compassitc.com/hs-fs/hubfs/office-1209640_1920-2.jpg?width=1920&name=office-1209640_1920-2.jpg "Compliance Services") # MA 201 CMR 17 Services ![Compliance Services](https://www.compassitc.com/hs-fs/hubfs/office-1209640_1920-2.jpg?width=1920&name=office-1209640_1920-2.jpg "Compliance Services") # MA 201 CMR 17 Services # MA 201 CMR 17 Compliance Services The MA 201 CMR 17 regulation requires that every organization that owns, licenses, stores or maintains personal information about a resident of the Commonwealth of Massachusetts develop, implement, maintain, and monitor a comprehensive written information security program applicable to any records containing such personal information. The information security program shall be reasonably consistent with industry standards, and shall contain administrative, technical, and physical safeguards to ensure the security and confidentiality of such records. The very first violation of this Massachusetts law resulted in a restaurant chain being fined $110,000. Through our MA 201 CMR 17 Risk Assessment, we will evaluate 20 separate control objectives to understand how your organization is adhering to the requirements of MA 201 CMR 17. #### MA 201 CMR 17 Main Areas of Focus 1. Duty to Protect and Standards for Protecting Personal Information 2. Computer System Security Requirements #### **Compass IT Compliance Services** - **MA 201 CMR 17 Risk Assessment -** Assess your current level of compliance with MA 201 CMR 17, identify gaps in controls, and identify key work areas that your organization must address to achieve and/or maintain compliance with the regulation   - **MA 201 CMR 17 Audit -** Our experienced, certified IT Auditors will examine your IT controls mapped against MA 201 CMR 17 requirements, obtain evidence to determine if the controls are operating effectively to achieve your organization's objectives and satisfy regulation requirements, and provide attestation of audit along with remediation strategies. A deeper dive assessment compared to the MA 201 CMR 17 Risk Assessment, the MA 201 CMR 17 Audit will include evidence sampling   - **MA 201 CMR 17 Advisory Services -** Work with your organization and tailor our project to your specific needs to address any concerns that you have related to MA 201 CMR 17, assist in the implementation and updating of policies and procedures, or assist in assessing the risk your third party providers pose related to MA 201 CMR 17 Let Compass IT Compliance assist your organization in assessing any risks present through our MA 201 CMR 17 services so you can secure your personal information environment, comply with regulatory compliance requirements, and save time, money, and resources in the process. [Contact Us](https://www.compassitc.com/contact) today to discuss your unique situation. **Secure. Comply. Save.** ## Related Resources [Cloud Security Risk Assessments](https://www.compassitc.com/services/cloud-security) [NIST IT Risk Assessments](https://www.compassitc.com/services/nist) [Vulnerability Assessment](https://www.compassitc.com/services/vulnerability-assessments) [Penetration Testing](https://www.compassitc.com/services/penetration-testing) --- ### Government Blog Posts --- ## [![Contact Us](https://no-cache.hubspot.com/cta/default/448486/9e9d17b4-6486-499b-ad73-a145ff790e8f.png)](https://cta-redirect.hubspot.com/cta/redirect/448486/9e9d17b4-6486-499b-ad73-a145ff790e8f) --- ## Related Resources [Cloud Security Risk Assessments](https://www.compassitc.com/services/cloud-security) [NIST IT Risk Assessments](https://www.compassitc.com/services/nist) [Vulnerability Assessment](https://www.compassitc.com/services/vulnerability-assessments) [Penetration Testing](https://www.compassitc.com/services/penetration-testing) --- ### Government Blog Posts --- ## [![Contact Us](https://no-cache.hubspot.com/cta/default/448486/9e9d17b4-6486-499b-ad73-a145ff790e8f.png)](https://cta-redirect.hubspot.com/cta/redirect/448486/9e9d17b4-6486-499b-ad73-a145ff790e8f) ### Compass IT Compliance, LLC **Corporate Office:** 2 Asylum Road North Providence, RI 02904   **Phone:** (401) 353-3024   ### Recent Posts ### Subscribe to Our Blog! Copyright © 2022 Compass IT Compliance, LLC. All Rights Reserved.