Skip to content

LayerLogix Academy · Track 5 of 6

Compliance in Texas

Compliance frameworks read like they were written for companies with a legal department. These lessons translate them into the IT work a Texas business has to do, and keep evidence of.

Lessons
46
Start here
3
Updated
Weekly
Start with lesson 1 All six tracks

Mission brief

A medical practice in Sugar Land, a defense subcontractor in Clear Lake and a tax firm in The Woodlands answer to different rules, but they get tripped up the same way: a policy written once and never followed, controls that exist but can't be proven, a security questionnaire answered optimistically. Texas adds its own layer on top, from HB 300 for medical records to the Texas Data Privacy and Security Act.

This track explains what each framework asks for in IT terms, how to scope it so it doesn't swallow the business, and what evidence an auditor, an insurer or a prime contractor will want to see.

What you'll be able to do

  • Tell which rules apply to you: HIPAA, Texas HB 300, CMMC, the FTC Safeguards Rule, TDPSA
  • Write a security program (WISP) that matches what you actually do
  • Answer cyber insurance and customer security questionnaires accurately
  • Set retention and legal-hold rules for email, Teams and text messages
  • Collect the evidence an assessment will ask for before it's requested

Launch sequence

Start here

  1. Lesson 1

    WISP: Written Information Security Program Guide for Texas SMBs 2026

    A written information security program (WISP) proves compliance and security to auditors and insurers. Here is what a Texas SMB must document, and how…

    Read the lesson
  2. Lesson 2

    CIS Controls IG1: A Plain-English Guide for Texas SMBs

    A straightforward breakdown of CIS Controls IG1 for Texas companies with 20-99 employees, including why SB 2610 makes this list worth your attention…

    Read the lesson
  3. Lesson 3

    What Your Biggest Customer's Security Questionnaire Really Wants

    A 40-question security questionnaire from your top customer isn't busywork. Here's what each section actually checks and how Texas SMBs should answer…

    Read the lesson

Flight log

More lessons in this track

Newest first.

Older lessons are in the LayerLogix blog.

Mission support

When you'd rather hand it off

Everything in this track is something you can do yourself. If you'd rather have it done for you, or checked, these are the services that cover it.

Compliance frameworksCMMC complianceHIPAA complianceCyber insurance readinessFTC Safeguards checklistCMMC self-assessment
Call NowBook a Call