Terms of Use

Articles, frameworks, checklists and resource pages describe general practice. Your environment, contracts and regulatory obligations are specific to you. Don't act on anything here as though it were reviewed for your business, because it wasn't.

The chat assistant is software. It summarizes how I work and answers common questions, and it will occasionally get something wrong or state something with more confidence than it has earned. Verify anything that matters, and treat its answers as a starting point for a conversation with me — not as professional advice.

Browsing this site, chatting with the assistant, submitting the contact form or completing the scorecard does not make you a client and does not put me under any obligation to you. An engagement begins only when we've both agreed to a scope in writing.

The IT & Security Risk Scorecard scores the answers you give it. It does not inspect your systems, test any control, or verify a single claim. It is a conversation starter and a way to prioritize, not an audit, a penetration test, a compliance attestation, or evidence of anything for an insurer or regulator.

• Read, share and quote the content with attribution — that's what it's for.
• Don't scrape it in bulk, republish it as your own, or use the chat assistant to attack, probe or overload the site.
• Don't submit anyone else's personal information through the forms.

Some pages link to tools, standards bodies and articles I find useful. I don't control those sites and I'm not responsible for what they do or say.

The site is provided as-is. It may be offline, out of date, or briefly wrong. To the extent the law allows, I'm not liable for losses arising from relying on it. If something here caused you a problem, email me — I'd rather fix it than argue about it.

Questions about these terms: ncc@incognito.hn.