Home / Services / Cybersecurity checkup & SHIELD Act
SVC-112 / Small business cybersecurity checkup & NY SHIELD Act safeguardsFind the open doors
before someone else does.
Not a 90-page report. A practical check of the things that actually get small businesses breached — then we fix them, and write it down so you can show clients, insurers, and regulators.
- Flat quote before any work
- All five boroughs + Long Island
- Parts at cost, shown first
PRICES / PICK HOW IT GETS DONE
Cybersecurity checkup, priced up front.
Checkup
Quoted flat
On-site or remote, flat-quoted by office size
Fixes
$129/hr
Implemented on-site or remotely
Complete plan
$159/user/mo
Ongoing security, monitoring, and planning
Phone estimate: freeFlat quote before any work. Parts at cost, shown on the quote.Estimate my job →Full rate card →
Most small-business breaches don't involve sophisticated hacking. They come from a reused password with no second factor, a phishing email, an ex-employee's account nobody turned off, an unpatched computer, or backups that turn out not to work. Our checkup looks at exactly those things.
New York's SHIELD Act requires any business that holds private information about New York residents to maintain reasonable administrative, technical, and physical safeguards — and it scales those expectations to the size of the business. We help you put the practical ones in place and document them: MFA, encryption, access control, patching, backups, secure disposal, and staff training.
We're practical generalists, not a penetration-testing firm or a law office. If your situation calls for a formal penetration test, a compliance audit, or legal advice, we'll tell you and help you prepare for it.
Book a checkup if…
- a client, insurer, or bank asked about your cybersecurity
- you hold Social Security numbers, account numbers, or medical information
- you're not sure everyone has MFA turned on
- an employee left recently and you're not sure what they can still access
- you've had a phishing scare or a suspicious login
SCOPE / WHAT YOU GET
What's included
Accounts and MFA
Every login that matters checked for two-step verification, shared passwords, and leftover access
Devices
Updates, encryption, screen locks, and endpoint protection on every computer and phone that touches work data
Backups
A test restore — not just a status light — and an offline or immutable copy for ransomware
Email and phishing
Spoofing protection, suspicious-login alerts, and a short staff phishing refresher
Network and Wi-Fi
Firewall, router firmware, guest separation, and camera or IoT isolation
Written safeguards
A plain-English summary of what's in place and an incident plan for the first hour of a breach
NEW YORK / WHAT WE SEE ON CALLS
What New York rules expect.
The SHIELD Act
Applies to businesses holding NY residents' private information — even ones based elsewhere — with expectations scaled to business size.
Breach notification clock
New York's breach law sets deadlines for notifying affected residents. Knowing your first steps ahead of time matters.
DFS-regulated firms
Insurance agencies and other DFS licensees have their own cybersecurity rules, including MFA requirements. Our forum covers the basics.
PROCESS / HOW A JOB GOES
From first call to fixed.
- 01
Call, text, or open a ticket
A technician — not a menu — asks what's happening and what you've tried.
- 02
Flat quote before any work
You hear the price up front. Nothing starts until you say yes.
- 03
Fixed on-site, at the bench, or remotely
Whichever is fastest for the problem: same-day visits across NYC and Long Island, pickup and return, or a secure screen-share.
- 04
Written up and followed up
You get a plain-English note of what we did and what to watch, and we check back that it's still working.
FREE CALL / NOT SURE WHAT YOU NEED?
Talk to a tech first.
Pick a time and get a straight answer and a flat price, with no sales script. Something down right now? Call 347-549-9059.
Loading open times…
FAQ / CYBERSECURITY CHECKUP & SHIELD ACT
Cybersecurity checkup & SHIELD Act questions, answered.
Who does the NY SHIELD Act apply to?
Any person or business that owns or licenses computerized private information of New York residents, regardless of where the business is located. Small businesses still have to maintain reasonable safeguards, but what's reasonable is scaled to the business's size, complexity, and the sensitivity of the data.
What are reasonable safeguards under the SHIELD Act?
The law describes administrative, technical, and physical safeguards. In practice that means things like a person responsible for security, staff training, access controls and MFA, updated software, malware protection, secure backups, secure disposal of data, and physical protection of devices and paper records.
What's included in a cybersecurity checkup?
We review accounts and MFA, devices and updates, backups with a test restore, email security and phishing exposure, the office network and Wi-Fi, and how former employees' access is removed. You get a plain-English summary, a prioritized fix list, and written safeguards.
How much does a checkup cost?
It's flat-quoted based on the number of people and devices, so you know the price before we start. Fixes are billed at $129 an hour on-site, or included in our Complete managed IT plan.
Do you do penetration testing?
No. We do practical security assessments and fixes for small businesses. If you need a formal penetration test or compliance audit, we'll tell you and help you prepare for it.
Is this legal advice?
No. We implement and document technical safeguards. For questions about legal obligations, talk to your attorney.
Who offers cybersecurity checkup near me in NYC and Long Island?
ITGoNYC does cybersecurity checkup on-site across Manhattan, Brooklyn, Queens, the Bronx, Staten Island, and Nassau and Suffolk County, plus remote help and pickup where it fits. Flat-quoted, on-site $129/hr. Every job gets a flat quote before work starts. Call or text 347-549-9059 (7 days · 8am–8pm ET) or book a free call at itgonyc.com/book.
FORUM / FREE GUIDES ON THIS
iCloud, OneDrive, and Google Drive are not backups — the 3-2-1 rule in plain English
Cloud sync keeps every copy the same — including the deleted and encrypted ones. Here's why sync isn't a backup, how the 3-2-1 rule works, and the simple setup we use for homes and offices.
Insurance agency or mortgage broker? What NYDFS Part 500 now requires — even if you're small
NYDFS's cybersecurity regulation covers licensed insurance agents, brokers, and mortgage firms regardless of size. The final phase — MFA for everyone and an asset inventory — took effect November 1, 2025.
NY SHIELD Act and the 30-day breach clock — a plain-English checklist for small businesses
If your business holds New York residents' personal information, the SHIELD Act requires reasonable safeguards — and since December 2024 you have 30 days to notify after a breach. A practical checklist.
NEAR YOU / CYBERSECURITY CHECKUP & SHIELD ACT BY AREA
Cybersecurity checkup near you.
RELATED SERVICES
DISPATCH / OPEN 7 DAYS
Cybersecurity checkup, today.
Call before noon for same-day on-site service anywhere in NYC and Long Island.
347-549-9059Or email support@itgonyc.com