Buffalo-based IT provider demonstrates that documented security controls are consistently followed throughout its operations.