SOC 2

6th April 2022

What is SOC 2 Certification? A Comprehensive Guide

Your growing company is hitting a sales plateau – it’s becoming difficult to close deals with security-conscious customers. Your sales and technical teams are getting bogged down with cybersecurity questionnaires and questions about a “SOC 2.” You need to know how to get a SOC 2 certification to remove this roadblock that your company faces….

31st March 2022

How to read a SOC 2 Report

The output of a SOC 2 audit isn’t a simple stamp of approval – it’s a detailed report about the security program.

10th February 2022

Doing the Legwork Once, for Everyone; Thoropass’s Vendor Database

Note: Thoropass was formerly known as Laika. We have updated their name in the content to reflect their new branding, but their old branding is still reflected in the screenshots of their software. Disclosure: After we published the Comparison of SOC 2 Compliance Software Vendors white paper, Thoropass approached us and asked if we’d like…

22nd December 2021

What does a bad auditor mean for your business?

Cybersecurity compliance evaluations like SOC 2, ISO 27001, and HIPAA might have one set of standards set by one overseeing organization, but the independent auditors who audit companies for these standards can have drastically different approaches. The result? Programs that are compliant being forced to do extra, meaningless work – or worse – companies that…

9th September 2021

ByteChek: Can you get SOC 2 software and an audit under one roof?

ByteChek is another new player in the SOC 2 compliance software space. Their differences? They provide both software and an audit for one fee.

12th May 2021

SOC 2 Type 1 vs Type 2: Get a Type 2!

Trying to pick between SOC 2 Type 1 vs Type 2? Our answer is simple, get the Type 2! Here’s why it’s the much better choice…

5th May 2021

SOC 2 vs ISO 27001: What’s the Difference?

SOC 2 and ISO 27001 take two different approaches to the same problem. Both will have you improving your security program, but in different ways. It’s important to understand the differences between the two, even if your ultimate decision might be the result of something else altogether.

22nd April 2021

SOC 2 Trust Services Criteria: An Easy Guide

The five SOC 2 Trust Services Criteria are different areas of focus for a your SOC 2 audit. This easy guide will help you choose them.

3rd December 2020

SOC 2 Compliance is Cybersecurity Customized, not Prescribed.

Does this sound familiar to you? The Sales team at your company keeps getting pushback from potential customers, particularly the larger ones. They insist on asking lots of invasive pre-sales questions about your company’s security practices, and it’s bogging down the process and you’re losing deals. The Director of Sales notices that many of the…

19th November 2020

Three Keys to a Great Internal Audit

I don’t remember much about middle school. It was the 80s, though, and things were certainly different back then. We had real chalk boards (with erasers that needed periodic clapping), gender-separated gym classes, and junk food and soda in the vending machines. One memory, in particular, has stayed with me. It happened in science class…