AICPA Updates SOC 2 Guidance: What’s Changed?

AICPA Updates SOC 2 Guidance: What’s Changed?

  The AICPA has revised and updated the SOC 2 guidelines. There are no changes to the SOC 2 trust services criteria (commonly referred to as control objectives) however, there are new and revised “points of focus.” At the core, the points of focus provide...
Why Do I Need SOC 2?

Why Do I Need SOC 2?

Whenever you serve the public, trust is everything. Your customers must have faith that you’ll protect their personal information. How can you assure potential new clients that your business is worthy of their trust? One approach is to undergo a System and...
Are You Ready for the New ISO 27001:2022?

Are You Ready for the New ISO 27001:2022?

This year has seen the first significant update to ISO 27002 since 2013. These modifications reflect in Annex A’s security controls for organizations with ISO 27001 certification. ISO 27001 is a standard for ISMS (information security management systems) that...
SOC 2 Compliance 101: All You Need to Know

SOC 2 Compliance 101: All You Need to Know

Blog  SOC 2 Compliance 101: All You Need to Know SOC 2 Compliance 101: All You Need to Know Protecting consumers’ personal information is crucial for modern businesses. SOC 2 is the industry standard for handling this significant responsibility to ensure...
SOC 2 Readiness Assessment: All You Need to Know

SOC 2 Readiness Assessment: All You Need to Know

Blog  SOC 2 Readiness Assessment: All You Need to Know SOC 2 Readiness Assessment: All You Need to Know You’ve heard about SOC 2 audits, and you’re scrambling to ensure your organization is ready for this significant compliance task. Many must realize that the real...
All you need to know about SOC 2 audits

All you need to know about SOC 2 audits

Blog  All you need to know about SOC 2 audits All you need to know about SOC 2 audits A SOC 2 Audit is a set of guidelines and standards that’s been around for many years. It was originally intended as a voluntary standard to promote customer privacy protection but...
What is a SOC 1 report?

What is a SOC 1 report?

A SOC 1 report is an evaluation of a company’s internal controls related to financial reporting. The purpose of a SOC 1 report is to give organizations comfort that their service providers have adequate controls and procedures in place to protect their data and...
PCI Password Requirements

PCI Password Requirements

Blog  PCI Password Requirements PCI Password Requirements Among the myriad of standards to enhance data security, the Payment Card Industry Data Security Standard (PCI DSS) stands out as a critical framework for credit card information organizations. This set of...