2026 Security & Compliance Quarterly Checklist
Bookmark this quarterly compliance checklist Financial Recovery Group’s experts follow and set your calendar for 2026 to keep up with best practices in security and compliance.
Q1: Initial Security Reviews & Exercises
- Third-party review (evaluation of ALL third parties and their reports, including SOC 2, HITRUST, etc., to ensure there are no security concerns that might arise from vendors)
- Review of the information security program
- Review of assets
- Incident response training and tabletop exercise (simulated test of your team’s plan for a cyberattack)
- Business continuity/disaster recovery training and tabletop exercise
Q2: Additional Security Reviews
- Security risk assessment review
- Compliance review
Q3: Training & Updating Security Plan
- Annual HIPAA workforce training
- Review and update of system security plan
Q4: EOY Reviews & Updates
- Policy & procedure review and update
- Technical compliance review
FRG’s Commitment to Security and Compliance
FRG maintains its own private, onshore data centers with automatic failovers for secure client data hosting. These environments are HITRUST r2 certified and designed for reliable uptime. This private cloud model gives clients confidence that their data is stored domestically and protected both physically and logically.
For additional information about FRG’s services and our dedication to security and compliance, email info@frgsystems.com or call 888-466-1025 today.