Software and fintech companies
Software and payments companies field security reviews from their customers. The written program behind the Utah defense answers most of those questions.
Northwind provides managed IT to Utah companies in Salt Lake City, Provo and Ogden, on the same Mountain hours as Boise. Our team also writes security programs and works on site statewide.
Northwind pairs daily IT support with a written security program that shows customers and insurers how your data is protected.
We work with companies along the Wasatch Front and in southern Utah.
Run Salt Lake City IT under a written security program.
Give growing Utah County teams managed IT and security.
Keep Ogden offices supported on Mountain time.
Get on-site help for office moves and buildouts as you grow.
Get monitoring, backups and help desk support without an in-house IT hire.
Software and payments companies field security reviews from their customers. The written program behind the Utah defense answers most of those questions.
Utah’s AI Policy Act requires disclosing AI use to customers who ask, until July 1, 2027. We set up the tools and the disclosure.
Support for Utah comes from our Boise office. The same team provides IT for nonprofits. See the full service area.
Monitoring and the help desk run remotely during Boise office hours. Technicians work on site from Logan to St. George.
Utah shares Boise’s time zone. The help desk is open 9am to 5pm Mountain, Monday through Friday. Northwind is available 24/7 for emergencies.
Last reviewed . This section summarizes state law and is not legal advice.
Utah’s Cybersecurity Affirmative Defense Act gives an organization a defense in court when it keeps a written security program built on a recognized framework, such as NIST or CIS. The program needs a named coordinator, staff training and a regular risk assessment.
Northwind writes the program, maps your controls to the framework and keeps the records that show it is followed.
Yes. Salt Lake City companies get the same 9am to 5pm Mountain hours as Boise, and our technicians work on site there.
The affirmative defense protects your organization in court when a lawsuit claims its security fell short. It does not cover a known threat that was ignored.
The right framework depends on your size and data: CIS Controls suit most smaller companies, and NIST or ISO suit larger ones. We pick it with you and map your controls to it.
No, not for most smaller companies. The act requires more than $25 million in revenue and data on 100,000 Utahns, or 25,000 if most revenue comes from selling data.
Book a consultation to scope managed IT and a written security program for your company.
Already a client?Open a ticketPay an invoice