| Compliance, News, SOC 2
The AICPA has revised and updated the SOC 2 guidelines. There are no changes to the SOC 2 trust services criteria (commonly referred to as control objectives) however, there are new and revised “points of focus.” At the core, the points of focus provide...
| Blog, Compliance, SOC 2
Blog Does SOC 2 require data to be encrypted “at rest” or only “in transit“? Does SOC 2 require data to be encrypted “at rest” or only “in transit“? Installing strong firewalls and keeping your antivirus software up to date are excellent protections to promote an...
| Compliance, Managed Security, SOC
Blog SOC for Cybersecurity SOC for Cybersecurity Managing customer data and exchanging digital information on a global level provides your organization with both unparalleled flexibility and versatility. However, opening up your resources and assets to the outside...
| Blog, Compliance, ISO 27001
Blog ISO 27001 vs. ISO 27002 ISO 27001 vs. ISO 27002 In the world of information security, two standards often come up: ISO 27001 and ISO 27002. But what exactly are they? ISO 27001 specifies the requirements for establishing, implementing, maintaining, and...
| Blog, Compliance, ISO 27001
Blog ISO 27001 vs NIST Cybersecurity Framework ISO 27001 vs NIST Cybersecurity Framework Numerous laws and regulations worldwide require corporations to adopt them to secure their data. NIST CSF and ISO 27001 are two of the most prevalent in North America. While both...
| Blog, Compliance, ISO 27001
Blog ISO 27001 Certification Process Step-by-Step ISO 27001 Certification Process Step-by-Step Increasingly, information security management is becoming a critical, top-priority issue for organizations of all sizes. Whether you serve a domestic or global customer...
| Blog, Compliance, ISO 27001
Blog ISO 27001 Risk Assessment Methodology ISO 27001 Risk Assessment Methodology Conducting an internal ISO 27001 audit enables you to assess your company’s security equipment, systems, protocols and procedures to ensure that they are in compliance with industry...
| Blog, Compliance, ISO 27001
Blog How to Conduct an Internal ISO 27001 Audit How to Conduct an Internal ISO 27001 Audit In order for your information security management system (ISMS) to be viable, you must periodically receive an internal, independent audit that shows how it is meeting the...