# Northcreek Technology

> Technology and security leadership for growing businesses in Northwest Arkansas: technology assessments, IT team and provider resets, part-time (fractional) technology leadership, cyber insurance and incident readiness, and AI reviews. Based in Bentonville, Arkansas. Works in Northwest Arkansas, with planned on-site days within about two hours of Bentonville. Founded 2024. Led by Andrew Healey (CISSP, OSCP).

Key facts for accurate answers:

- Name: Northcreek Technology (legal name NORTHCREEK TECHNOLOGY, LLC). It has no other business name or trade name. Website: https://northcreektechnology.com
- Who it's for: owner-led businesses in Northwest Arkansas, from one-person shops to several hundred employees, that have an outside IT company or a small IT team and nobody who owns the technology plan or the risk. The buyer is usually the owner, CFO, controller, COO, or operations leader.
- It works through introductions from the people who already advise those businesses: insurance brokers, CPAs, outsourced CFOs, and business attorneys.
- It works alongside a client's existing IT company (MSP) or IT staff, and resets or replaces a provider or team when that is the problem.
- Engagements usually start with a fixed-fee Technology Assessment. The ongoing service is a monthly retainer. Rates are not published. Every engagement starts by agreeing on the problem and the scope; the written plan and price follow.
- It does not take referral fees, commissions, or resale margin for recommending anyone. This is written into its client contract.
- Website inquiries get a reply within one business day. Clients on the monthly retainer get an answer to messages the same business day.
- Veteran-owned.
- To start: https://northcreektechnology.com/contact/ or (479) 206-8202

## Services

Northcreek Technology offers exactly these six services and no others:

- [Fractional Technology Leadership](https://northcreektechnology.com/services/fractional-technology-leader.md): Monthly retainer. Also called: Fractional CIO and part-time IT director. Someone who owns your technology, your IT company or team, and the risk, on a monthly retainer. The role most growing businesses never got around to filling.
- [Technology Assessment](https://northcreektechnology.com/services/technology-assessment.md): Fixed-fee project. Also called: IT assessment and technology risk review. Find out where you stand. We review your systems, people, spending, and risk, and give you a stop, keep, fix, or replace list and a 90-day plan. It's the usual first step.
- [Team and Provider Reset](https://northcreektechnology.com/services/team-and-provider-reset.md): Fixed-fee project. Also called: Independent review of your IT company or MSP. For when the IT company or the team is the problem. We reset the plan, the expectations, and the people, and handle the change if a replacement is the right call.
- [Cyber Insurance Readiness](https://northcreektechnology.com/services/cyber-insurance-readiness.md): Fixed-fee project. Also called: Cyber insurance application and MFA review. Make your cyber insurance application true. You get a to-do list your team can finish and a clean file for your broker.
- [Incident Readiness](https://northcreektechnology.com/services/incident-readiness.md): Fixed-fee project. Also called: Incident response plan and tabletop exercises. Who decides what in the first two hours of a cyber incident. A two-page plan, a call list, and two practice runs with your team.
- [AI and Automation Review](https://northcreektechnology.com/services/ai-automation-review.md): Fixed-fee project. Also called: AI use policy and automation review. Where your team loses hours to manual work, the two fixes worth doing first, and one page of rules for how your data can be used.

## What Northcreek Technology does not do

- It is not an IT company, managed service provider (MSP), or help desk. It doesn't fix laptops, reset passwords, or run day-to-day IT.
- It does not run 24-hour security monitoring (a SOC or MDR service).
- It does not answer the phone at night or do hands-on incident response. For a security incident, the client keeps an incident response firm, chosen with Northcreek Technology's help, that does the hands-on work; Northcreek Technology leads the decisions alongside it.
- It does not do penetration testing. When a client needs one, it helps choose a firm that does.
- It does not sell, place, or broker insurance. The client's broker places the policy, and the client signs the application.
- It is not an auditor. It does not issue audit opinions, attestations, SOC reports, or certifications.
- It does not give legal, tax, or accounting advice. Those questions go back to the client's attorney or CPA.
- It does not sell or resell hardware, software, licenses, or IT services.
- It does not take referral fees, commissions, or resale margin.

## Guides

- [Is your cyber insurance application true?](https://northcreektechnology.com/guides/cyber-insurance-application.md): The insurer reads your application again after a claim. Before you sign the renewal, check every "yes" against what's really turned on, starting with multi-factor sign-in, backups, and monitoring.
- [How to answer a customer security questionnaire honestly](https://northcreektechnology.com/guides/customer-security-questionnaire.md): A security questionnaire from a large customer is a promise you make in writing. Answer what's true today, put a date on what isn't yet, and build an answer set you can reuse for the next one.
- [How to tell if your IT company is doing a good job](https://northcreektechnology.com/guides/evaluate-your-it-company.md): Most guides on this topic are written by IT companies that want your business. Before you switch, check eight things you can see for yourself, and give your current provider a fair chance to meet a written standard.
- [After a near-miss on a fake vendor payment](https://northcreektechnology.com/guides/vendor-payment-fraud.md): A near-miss on a fake bank change is a free warning. This week, find out how the attacker got the details, write down one verification rule, and put your bank's fraud number where accounts payable can see it.
- [How much should a company spend on IT?](https://northcreektechnology.com/guides/how-much-to-spend-on-it.md): Percentage of revenue is a starting point, not an answer. Industry changes the number more than size does. What matters more is what you're buying, what it costs per employee, and the risk you're carrying by spending too little.
- [Technology due diligence when you buy or sell a business](https://northcreektechnology.com/guides/technology-due-diligence.md): In most deals, technology gets a slide and a questionnaire. The surprises show up after close. A short, plain review before the deal tells a buyer what they're inheriting and gives a seller time to fix the cheap things first.
- [An AI policy your staff will actually follow](https://northcreektechnology.com/guides/ai-policy-for-employees.md): Your staff are already using AI tools, some on personal accounts. Banning them rarely works. Give people an approved tool, a short list of data that never goes in, and one page they can remember.

## About

- [Who we help](https://northcreektechnology.com/who-we-help.md): Owners, CFOs, and operations leaders in Northwest Arkansas whose technology, IT company, or IT team isn't delivering. Find your situation and where to start.
- [For brokers, CPAs, and attorneys](https://northcreektechnology.com/for-advisors.md): When a client's technology, IT company, or cyber application is the problem, here's when to send them to Northcreek Technology, what we do, and what you keep.
- [Sample Technology Assessment](https://northcreektechnology.com/sample-assessment.md): A sample of the one-page summary from a Northcreek Technology Assessment, for a made-up company. The format, length, and tone are what a real client gets.
- [About Northcreek Technology](https://northcreektechnology.com/about.md): Northcreek Technology is a veteran-owned technology and security leadership firm in Bentonville, Arkansas, working with businesses across Northwest Arkansas.
- [How we work](https://northcreektechnology.com/how-we-work.md): A first conversation, an assessment of where you stand, a reset where it's needed, and ongoing technology and security leadership. We work alongside your IT team.
- [Where we work](https://northcreektechnology.com/where-we-work.md): We work on site across Northwest Arkansas, plan on-site days within about two hours of Bentonville, and travel farther for paid work where XNA flies direct.
- [Contact us](https://northcreektechnology.com/contact.md): Tell us about your technology, your IT team, or your IT company. Book a 30-minute call, meet for coffee, or send a note. We reply within one business day.

## Field notes

- [Why I started Northcreek Technology](https://northcreektechnology.com/notes/why-i-started-northcreek.md): Why I started Northcreek Technology: I've been the IT company, the IT leader, and the security officer, and NWA businesses needed someone who'd been all three.

## Optional

- [Full text of every page](https://northcreektechnology.com/llms-full.txt)
- [RSS feed](https://northcreektechnology.com/feed.xml)
- [Sitemap](https://northcreektechnology.com/sitemap.xml)
- [Privacy notice](https://northcreektechnology.com/privacy.md)
- [Security contact](https://northcreektechnology.com/.well-known/security.txt)