Free Compliance Assessment | Northern Computers

1Does your business collect, store, or process data from New York residents?

Yes, we handle NY resident data

No, we don't have NY customers/employees

Not sure

2What types of New York resident data does your organization handle? (Select all that apply)

Social Security Numbers

Financial account numbers or credit/debit cards

Driver's license or state ID numbers

Biometric data (fingerprints, facial recognition, etc.)

Email addresses/usernames with passwords

Medical information or health records

None of the above

3Does your organization operate in the healthcare industry?

Yes, we are a healthcare provider (doctor, hospital, clinic, pharmacy, etc.)

Yes, we are a health plan or health insurance company

Yes, we are a healthcare clearinghouse

We provide services to healthcare organizations (IT vendor, billing, cloud services, etc.)

No, we don't operate in healthcare

4Does your business accept credit or debit card payments?

Yes, we accept card payments

Yes, we store, process, or transmit card data for other businesses

No, we don't accept card payments

5How many payment card transactions does your business process annually?

More than 6 million transactions per year

1–6 million transactions per year

20,000 – 1 million transactions per year

Less than 20,000 transactions per year

Not applicable (we don't process card payments)

6What is the size of your organization?

Fewer than 50 employees and less than $3M annual revenue

50–500 employees

More than 500 employees

7Which of the following apply to your organization? (Select all that apply)

Applying for or have cyber insurance

Municipality or local government agency

Critical infrastructure (water, power, emergency services)

Federal contractor or seeking federal contracts

Board/leadership asking for cybersecurity program

None of these apply

8Does your organization do any work related to defense or federal contracts?

Yes, we are a prime contractor or subcontractor for Department of Defense

Yes, we have federal contracts (non-DoD)

Yes, we're in the defense supply chain (manufacturer/supplier to defense contractors)

No, but we're considering pursuing DoD/federal contracts

No defense or federal contract work

9Do you handle any of the following from federal/DoD contracts? (Select all that apply)

Technical drawings, specifications, or designs

ITAR or export-controlled information

Manufacturing processes or procedures for defense

Source code or software for federal systems

Controlled Unclassified Information (CUI)

Contracts with DFARS clause 252.204-7012

None of the above / Not applicable

Which regulations actually apply to you?

Prefer to talk it through?