An exam or review is coming
FTC Safeguards, a state examiner or a customer's security questionnaire. Know where you stand and what to fix first.
Audit readiness[ it · security advisory ]
Every finding owned. Every fix verified.
IT and security advisory for small regulated firms. Audit readiness, yearly checks and cyber insurance renewals, with the evidence to back every answer.
Free Check: 2 minutes, public data only, no login.
Readiness report
11Met
6Partly
2Not met
- MFA on remote accessFix now
- Written incident response planDue Jan 15
- Backups restored and testedVerified
[ why people call ]
Someone is about to ask for proof.
Your cyber insurance renews soon
Answer the application with evidence, not memory.
Insurance renewalYour owners or board want a yearly answer
The same questions each year, so you can see what got better, what slipped and what's new.
Annual check[ how it works ]
List it. Fix it. Prove it.
List it.
We check what anyone can see about your firm, then work through 25 or 43 plain-English questions with you and your IT provider.
Fix it.
You get a ranked list with an owner, a date and a cost to fix for each item. Your IT provider can work straight from it.
Prove it.
Evidence behind every answer, ready for the examiner, the carrier or the board. One principal signs every report.
[ trulist ]
See everything in TruListStart small. Go deeper when you need to.
Kit
$199
25 questions, public checks, an insurance answer guide and a report with priorities. Credited toward a Review.
Review
$2,500
All 43 questions, evidence reviewed by a principal, a signed report and a 60-minute readout. Or $2,500 per year as your annual check.
Assessment
from $3,950
Read-only evidence collection, a gap matrix for every element of the rule, and a remediation plan.
Readiness, not certification, audit opinion or legal advice.
What can anyone see about your firm?
Email security, website, internet exposure. Free, 2 minutes, public data only.
[ other services ]
When the list needs more than a report
- Security documents
Your WISP and policies, written down and approved. - Fireline
A written incident response plan, including who to call first. - Remediation
Help fixing what the list found. Disclosed on your report.
[ about ]
Jason List, Principal
I started out supporting IT for about 200 community banks through their exams. Examiners asked for proof, not policies. I've spent the years since running infrastructure and security at much larger organizations. List Advisors brings that same standard to small regulated firms.
Rules set the ratings. AI helps draft, never decides. Your data never trains AI.
Nothing left open.
Tell us what's coming up. We'll tell you where to start.