Give me fifteen minutes on Zoom. You show me the document your IT company handed you, and I will tell you what DFS would make of it.
Book 15 minutes with me
Check what you have against these. Five minutes — the same three things DFS keeps flagging.
Not your IT company. You. The certification says your program meets the requirements, and the risk assessment is one of them.
You cannot certify what you cannot produce.
Send over the document your IT company gave you, or just come with questions. I run it against the same three tests above and you leave knowing where you stand.

"Cavallino Risk would not have survived the economic turmoil of the great recession or the disruptive technology that has occurred in the retail insurance marketplace without the support of Motiva."
"The thing that sets Motiva apart is that they shine through and are there for you when needed."
"They follow up to make sure the issues were handled to our satisfaction; I have never had a tech company do that."