Your law firm may already be using AI, even if you never officially approved it. I look at shadow AI, client information, AI policies, Microsoft Copilot and the practical steps small law firms can take to put AI governance in place without making it unnecessarily complicated.

Does HIPAA apply to your law firm just because you handle medical records? Not necessarily. I explain when HIPAA may apply to a law firm, what that means for your technology, and what I discovered during an IT Baseline Assessment that uncovered problems with backups, shared accounts, Microsoft 365 security, access controls, and documentation.

AI governance for small businesses showing Shadow AI risks and security controls Updated August 2026: I originally wrote this article after a client contacted me before expanding AI use across their business. Since then, both the technology and the conversation around AI governance have continued to develop quickly. I have also had more opportunities to work through AI adoption with small businesses and see the questions that come up once employees move beyond experimenting w

A healthcare business came to me needing to address HIPAA requirements and CARF accreditation, but first we had to understand where their technology stood. This real client story covers the IT Baseline Assessment, security improvements, cloud transition, incident response planning, and how those changes helped the business stay operational when a severe storm later damaged its office and IT equipment.