Who we are
DesignatedQI is an independent security and compliance firm. We serve as the outsourced Qualified Individual for businesses covered by the FTC Safeguards Rule, and we build and oversee the security programs the rule requires.
Our approach comes from Payment Card Industry (PCI) security assessment: testing controls, interviewing staff, reviewing evidence and writing reports that have to stand up to scrutiny from card brands and banks. We apply the same standard to your Safeguards Rule program.
Credentials: CISSP · ISO/IEC 27001 Lead Auditor
Why DesignatedQI
The 2021 update to the FTC Safeguards Rule required thousands of small and mid-sized businesses to run formal security programs, often for the first time. Many simply named their IT provider as their QI. We started DesignatedQI to offer something better: an independent QI who knows what a defensible program looks like, because assessing security programs is what we do.
How we work
- Independent. We don't sell IT services or hardware.
- Plain English. Reports your owners will actually read.
- Evidence-based. Every control is backed by evidence, the way an examiner expects.
- Remote. All of our work is done remotely, so we can serve covered businesses anywhere in the U.S. We're based in the Atlanta area.
Want an independent view of your program? Get in touch → or get the checklist →