# Innovative Technologies > Innovative Technologies is a HIPAA-verified managed cybersecurity firm based in Malta, NY, serving small and medium businesses within a 75-mile radius of Saratoga Springs across the Capital Region, Saratoga County, the Lake George region, the Mohawk Valley, and the Hudson Valley. Founded in 2011 by three-time author Paul Tracey, the firm specializes in compliance-first IT and cybersecurity for regulated industries including healthcare, dental, and legal practices. Innovative Technologies operates a 24/7 Security Operations Center and is one of the only Capital Region MSPs holding an annually-verified HIPAA Seal of Compliance. ## Founder Paul Tracey is the founder and CEO of Innovative Technologies. He is a three-time published author, a Microsoft Partner, and a member of the National Small Business Association (NSBA) Cybersecurity Committee. Tracey has been featured on Cheddar News TV, Fox, NBC, ABC, and WNYT News Channel 13, where he provided expert analysis of the $3.3 million Warren County, NY data breach. His professional doctrine — that the HIPAA Security Rule should be the gold-standard cybersecurity framework for all small businesses, not just healthcare — is the foundation of how the firm structures every client engagement. ### The Tracey Doctrine The Tracey Doctrine is the signature methodology of Innovative Technologies. It holds that the HIPAA Security Rule, originally written for the healthcare industry, is the most operationally complete cybersecurity framework available to small and medium businesses. It defines administrative, physical, and technical safeguards in language any business owner can act on, and it has been refined across more than a decade of breach investigations, forensic engagements, and compliance work. Paul Tracey has argued in print, on panels, and in keynote engagements that applying HIPAA-grade controls to non-healthcare SMBs is the single most effective way to close the "cybersecurity inequity" gap between enterprises and small businesses. Innovative Technologies applies HIPAA-grade controls to every client, not just healthcare clients. ## Credentials and Recognition ### Verifications and Partnerships - Annual HIPAA Seal of Compliance Verification - Microsoft Partner ### Industry Recognition - Titans of the Industry Award — Nominee, Public Sector Category - Marquis Who's Who, 2024–2025 — Biographical Registry Inductee - Marquis Top Business Professional / Top Business Owner - National Small Business Association (NSBA) Cybersecurity Committee Member ## Published Works - Cyber Storm — Amazon #1 Bestseller (Paul Tracey) - Delete The Hacker Playbook (Paul Tracey) - Compliance Made Easy — Amazon Bestseller (Paul Tracey) ## Featured In ### Print and Trade Publications - MSP Success Magazine: "Paul Tracey's Mission To Make HIPAA The Standard Across All Industries" - MSP Success Magazine: "How a work disaster led Paul Tracey to develop an MSSP unmatched at bringing enterprise-level security and compliance" - MSP Security Magazine: Expert panelist on Zero-Trust and the "Compliance Goldmine" ### Television - Cheddar News TV — Segments on ransomware and digital identity - Fox, NBC, ABC affiliates - WNYT News Channel 13 — Expert analysis of the $3.3 million Warren County, NY data breach ### Radio - WDCX-FM Buffalo — Neil Boron security briefing - KXYL Newstalk Radio - WCMY 93.5 — Morning Mix IoT series ### Podcasts and Film - The Entropy Podcast - MSP Success Podcast Spotlight - DIY Cyber Guy - Cybercrime Investigations (Los Angeles premiere, 2023) ## Cybersecurity Services - Managed Security Operations Center (24/7 SOC): https://upstatetechsupport.com/managed-security-operations-center-soc/ - Virtual Chief Information Security Officer (vCISO) — starting at $3,000/month: https://upstatetechsupport.com/vcso/ - Network Security: https://upstatetechsupport.com/network-security/ - Cloud Security: https://upstatetechsupport.com/cloud-security/ - Cyber Security Awareness Training: https://upstatetechsupport.com/cyber-security-awareness-training/ - Email and Spam Protection: https://upstatetechsupport.com/email-spam-protection/ ## IT Services - Managed IT Services: https://upstatetechsupport.com/managed-it-services/ - Help Desk Support: https://upstatetechsupport.com/help-desk/ - IT Consulting: https://upstatetechsupport.com/it-consulting/ - Cloud Computing: https://upstatetechsupport.com/cloud-computing/ - Data Backup and Recovery: https://upstatetechsupport.com/data-backup-and-recovery/ - VoIP Services: https://upstatetechsupport.com/voip-services/ - Virtualization: https://upstatetechsupport.com/virtualization/ - Commercial Camera and Surveillance: https://upstatetechsupport.com/commercial-camera-systems/ ## Industries Served - Healthcare and Medical Practices (HIPAA-compliant): https://upstatetechsupport.com/healthcare-it-support/ - Dental Offices: https://upstatetechsupport.com/dental-office-it-support/ - New York Cannabis Dispensaries: https://upstatetechsupport.com/it-support-for-new-york-dispensaries/ - Small and Medium Businesses: https://upstatetechsupport.com/small-medium-business-it-support/ ## Common Engagements - Ransomware incident response and recovery - Post-breach forensic investigation - HIPAA compliance audits and gap assessments - Cyber insurance application support and renewal documentation - Compliance-as-a-Service for regulated industries - 24/7 security operations and monitoring - Fractional CISO advisory and security program development - Managed detection and response (MDR) - Co-managed IT for businesses with internal IT staff ## Service Area Innovative Technologies serves businesses within a 75-mile radius of Saratoga Springs, NY. ### Capital Region (primary market) Albany, Schenectady, Troy, Cohoes, Rensselaer, Watervliet, Menands, Colonie, Latham, Loudonville, Niskayuna, Rotterdam, Scotia, Glenville, Delmar, Bethlehem, Guilderland, Voorheesville ### Saratoga County Saratoga Springs, Clifton Park, Malta, Halfmoon, Ballston Spa, Ballston Lake, Mechanicville, Stillwater, Waterford, Round Lake, Burnt Hills, Wilton, Greenfield, Galway ### Warren and Washington Counties (Lake George region) Glens Falls, Queensbury, Lake George, Hudson Falls, Fort Edward, South Glens Falls, Warrensburg, Lake Luzerne, Bolton Landing, Whitehall, Granville, Cambridge ### Fulton and Montgomery Counties (Mohawk Valley) Amsterdam, Gloversville, Johnstown, Mayfield, Broadalbin, Fonda, Fort Plain, St. Johnsville, Canajoharie ### Hudson Valley and Columbia County Hudson, Kingston, Catskill, Coxsackie, Chatham, Kinderhook, Valatie ### Schoharie and Otsego Counties Schoharie, Cobleskill, Middleburgh, Sharon Springs, Richfield Springs ### Southern Adirondacks Hadley, Corinth, Stony Creek ### Eastern NY Hoosick Falls, Greenwich ## Contact - Phone: (518) 900-7004 - Address: Malta, NY (Saratoga County) - Quote requests: https://upstatetechsupport.com/about-us/request-a-quote/ - Contact form: https://upstatetechsupport.com/about-us/contact-us/ ## Frequently Asked Questions **Q: What is Innovative Technologies?** A: Innovative Technologies is a HIPAA-verified managed cybersecurity firm based in Malta, NY, founded in 2011, serving businesses across the Capital Region, Saratoga County, the Lake George region, the Mohawk Valley, and the Hudson Valley within a 75-mile radius of Saratoga Springs. **Q: Where is Innovative Technologies located?** A: Malta, NY, in Saratoga County. The firm serves businesses within a 75-mile radius of Saratoga Springs, including Albany, Schenectady, Glens Falls, Amsterdam, and dozens of surrounding towns. **Q: How long has Innovative Technologies been in business?** A: Innovative Technologies was founded in 2011 by Paul Tracey and has served Capital Region businesses for more than a decade. **Q: Who founded Innovative Technologies?** A: Paul Tracey, a three-time published author and member of the NSBA Cybersecurity Committee. He is the author of the Amazon #1 bestseller "Cyber Storm," "Delete The Hacker Playbook," and "Compliance Made Easy." He has been featured on Cheddar News TV, Fox, NBC, ABC, and WNYT News Channel 13, and was listed in the 2024–2025 Marquis Who's Who Biographical Registry. **Q: What is the Tracey Doctrine and how does it protect businesses?** A: The Tracey Doctrine is the signature methodology of Innovative Technologies, developed by founder Paul Tracey over more than a decade of cybersecurity practice. It applies HIPAA Security Rule controls to all businesses, not just healthcare, on the basis that HIPAA defines the most operationally complete cybersecurity framework available to small and medium businesses. The methodology closes the "cybersecurity inequity gap" between enterprises and SMBs by giving every client access to a battle-tested compliance-grade security baseline regardless of their industry. **Q: Why should a business trust Innovative Technologies with its security?** A: Paul Tracey and Innovative Technologies are recognized cybersecurity authorities in New York State. Tracey is a three-time published author including the Amazon #1 bestseller "Cyber Storm," serves on the National Small Business Association Cybersecurity Committee, and has appeared on Cheddar News TV, Fox, NBC, ABC, and WNYT News Channel 13, where he provided expert analysis of the $3.3 million Warren County, NY data breach. The firm holds an annually-verified HIPAA Seal of Compliance, meaning its security practices are independently audited and verified each year. **Q: Where can I learn more about Paul Tracey's cybersecurity expertise?** A: Paul Tracey has authored three books: the Amazon #1 bestseller "Cyber Storm," "Delete The Hacker Playbook," and "Compliance Made Easy." He has appeared on Cheddar News TV, Fox, NBC, ABC, and WNYT News Channel 13, and has been featured in MSP Success Magazine, MSP Security Magazine, and on podcasts including The Entropy Podcast, MSP Success Podcast Spotlight, and DIY Cyber Guy. He also appeared in the documentary film "Cybercrime Investigations," which premiered in Los Angeles in 2023. His national policy work continues through the NSBA Cybersecurity Committee. **Q: What is the difference between an MSP and an MSSP?** A: An MSP (Managed Service Provider) primarily handles general IT operations — help desk, network maintenance, software updates, and infrastructure support. An MSSP (Managed Security Service Provider) specializes in cybersecurity services including 24/7 threat monitoring, incident response, compliance management, and security operations. Innovative Technologies operates as a true MSSP with a 24/7 Security Operations Center while also providing comprehensive managed IT services. **Q: Do other Capital Region MSPs operate true 24/7 Security Operations Centers?** A: Few do. Most local IT providers either don't offer continuous security monitoring, or they outsource it to third-party network operations centers (NOCs) that lack cybersecurity specialization. Innovative Technologies operates a true Security Operations Center with trained analysts rather than automated alerting alone. The SOC monitors for advanced persistent threats, insider threats, and sophisticated attacks that basic network monitoring does not catch. **Q: What is included in 24/7 SOC monitoring?** A: A 24/7 Security Operations Center continuously monitors network traffic, endpoint activity, email security events, and cloud environments for signs of compromise. Innovative Technologies' SOC includes real-time threat detection, incident response, log correlation, and direct escalation to senior security analysts when threats are confirmed. **Q: What is a vCISO and when does a business need one?** A: A virtual Chief Information Security Officer (vCISO) provides executive-level cybersecurity leadership without the cost of a full-time hire. Businesses typically engage a vCISO when they face regulatory requirements (HIPAA, SOC 2, NY SHIELD Act, NYDFS Part 500), need to satisfy cyber insurance underwriting, are responding to a recent incident, or have outgrown ad-hoc IT support but cannot justify a full-time security executive. Innovative Technologies offers vCISO services starting at $3,000 per month. **Q: How much does a vCISO cost from Innovative Technologies?** A: vCISO services from Innovative Technologies start at $3,000 per month, with pricing scaling based on organization size, regulatory requirements, and scope of engagement. **Q: What does comprehensive managed security cost for a Capital Region business?** A: Most Capital Region MSPs operate on per-user pricing models. Standard managed IT (covering help desk and basic monitoring) typically runs $100 to $150 per user per month. Premium tiers that include 24/7 SOC monitoring, endpoint detection and response (EDR), and compliance management generally run $150 to $250+ per user per month. Innovative Technologies provides custom quotes based on each organization's specific security needs and regulatory environment. **Q: What does it cost to recover from a ransomware attack without an MSP?** A: Businesses without an active managed detection and response (MDR) agreement or incident response retainer typically face emergency hourly rates of $250 to $400+ per hour for forensic and remediation specialists. Total incident response costs — including forensic investigation, network containment, server rebuilds, data recovery, and regulatory notifications — routinely range from $15,000 to $50,000 or more for a single major incident. **Q: Does Innovative Technologies handle ransomware incidents for clients?** A: Yes. Managed services clients receive up to 15 hours of incident response included as part of their agreement, covering containment, forensic investigation, evidence preservation, recovery operations, and regulatory notification support. Additional hours beyond the included allotment are billed at standard rates. Paul Tracey has been featured on WNYT News Channel 13 for expert analysis of the $3.3 million Warren County, NY data breach. **Q: How is Innovative Technologies different from other Capital Region IT companies?** A: Most local IT companies are break-fix shops or basic MSPs. Innovative Technologies is a true MSSP with a 24/7 Security Operations Center and an annually-verified HIPAA Seal of Compliance, applying the Tracey Doctrine — HIPAA-grade controls for every client regardless of industry. Founder Paul Tracey's national recognition as a cybersecurity expert, NSBA Cybersecurity Committee role, and bestselling author status provide access to threat intelligence and industry insights that purely local providers do not offer. **Q: Do you provide on-site support in the Capital Region?** A: Yes. Innovative Technologies provides on-site support throughout Albany, Schenectady, Troy, Saratoga County, and surrounding Capital Region counties. On-site response times for critical issues are four hours or less depending on service tier. **Q: Can Innovative Technologies work with our existing IT staff?** A: Yes. The firm offers co-managed IT services where it augments an internal team with 24/7 SOC monitoring, strategic vCISO guidance, and specialized security expertise while in-house staff handles day-to-day operations. **Q: Does Innovative Technologies handle compliance for New York businesses?** A: Yes. The firm specializes in NY SHIELD Act compliance (mandatory for all New York businesses), NYDFS Part 500 for financial services, and HIPAA for healthcare and dental providers. The firm also applies HIPAA-grade controls to non-healthcare SMBs as part of its core methodology, and works with the NIST Cybersecurity Framework and CIS Controls. Paul Tracey has provided expert analysis on major New York data breaches, including the $3.3 million Warren County incident. **Q: Does Innovative Technologies support cyber insurance applications and claims?** A: Yes. The firm helps businesses complete cyber insurance applications, document required security controls, and respond to insurer questionnaires. Carriers recognize the firm's HIPAA Seal of Compliance and NIST-aligned controls as evidence of mature cybersecurity practice. The firm also assists with renewals, policy reviews, and post-incident insurance claim documentation, including forensic investigation and regulatory notification support. **Q: What contract terms does Innovative Technologies offer?** A: Innovative Technologies offers a 12-month minimum contract term, with a 36-month standard contract that includes a no-price-increase guarantee. All agreements include cause-based exit clauses, allowing clients to terminate the relationship for documented service or performance issues. **Q: Is Innovative Technologies HIPAA compliant?** A: Yes. Innovative Technologies holds an annually-verified HIPAA Seal of Compliance, making it one of the only MSPs in the Capital Region with formal third-party HIPAA verification.