Terms of Use

What these terms cover

These terms apply to your use of this website. They are not the terms of a consulting engagement. Work we do for a client is governed by a signed agreement, and where that agreement and this page disagree, the agreement wins.

The pages here are general information

Everything on this site is written for a general audience of security and technology leaders. It is not advice about your agency, your network or your legal obligations, and it is not legal advice at all. Security guidance also ages, so treat anything here as current as of the date on the page, which may not be the day you read it.

Reading a page, downloading something or sending the form does not make us your consultant. That relationship starts when both sides sign an agreement.

No promise of a compliance outcome

Nothing on this site guarantees that you will pass an audit, satisfy a framework or meet a contractual security requirement. Our work helps you get there. Where a requirement calls for your organization to affirm something, you are the one signing it.

Do not send us sensitive material through the form

The contact form is for saying who you are and what you need. It is not a secure channel. Do not send classified information, controlled unclassified information, credentials, network diagrams, incident details or anything else you would not want sitting in email. If you have something sensitive to discuss, say so in the form and we will set up an appropriate channel first.

Do not use the form to send malware or bulk automated messages. If you want to test our defenses, follow the vulnerability disclosure policy.

Our content

The writing, design and images on this site belong to Foundation Consultant Group unless credited to someone else. Quote us with attribution and a link, and feel free to share a page with a colleague or put it in a briefing. Do not republish a page wholesale, resell it or present it as your own work.

Links to other sites

We link to articles, government guidance and other people's work. We do not control those sites and are not responsible for what they say or do. Linking to something does not mean we endorse everything on it.

Availability and liability

This site is provided as is. We do not promise it will always be reachable or error free, and to the extent the law allows, we are not liable for loss arising from your use of it or from anything you decided based on a page here. If a court finds we owe you something for the website itself, that liability is limited to what you paid us for access to it.

This does not limit anything we owe a client under a signed engagement agreement.

Governing law

Ohio law governs these terms, without regard to its conflict-of-laws rules. Any dispute about this website goes to the state or federal courts in Ohio, and by using the site you agree those courts can hear it. A signed engagement agreement may name a different forum, and for the work covered by that agreement, the agreement controls.