Briggs I.T. Services

Here's a sequence of events that catches firms off guard:

A breach gets discovered on a Monday. By Tuesday, the legal notification clock is already running — Texas law requires the Attorney General be notified within 30 days for any breach affecting 250+ Texans. Customers have to be notified "as soon as practicable." If you're a financial firm, SEC rules add another 30-day clock.

All those clocks start at discovery — not at incident, not at confirmation, not when the lawyers are ready. The moment somebody realizes something happened, the legal countdown is running.

NIST has a whole framework section called "Respond" whose entire job is to make those days survivable. The firms that come through breaches intact are the firms that already had a plan when the call came in.

We've put together a free guide covering this and seven other Texas compliance issues for 2026.

Want a copy? Email [email protected] and we'll send it right over.

Tax pros — a practical one for you.

The IRS rule requiring a Written Information Security Plan (the "WISP") starts with one foundational item: a list of where you keep taxpayer information. Paper files, computers, email, cloud storage, backups — every place data lives, written down.

Sounds simple. And it is — but most small practices haven't actually done it. Which becomes a problem on Form W-12 every year, where you attest under penalty that you have a WISP in place.

Here's the good news: the same inventory satisfies federal rules (the FTC's, the IRS's), state safe harbor (Texas SB 2610), and the CIS Controls framework. One afternoon of work covers a lot of ground.

We offer a free 60-minute review at your office that walks through exactly this — and you keep a written report of your top five risks.

Email [email protected] to set it up. Want our free compliance guide first? Just ask.