What is SOC 2 System Operations (CC7)? Organizations are responsible for managing the operation of their systems, which means they need to continuously work to detect, prevent, and address any security issues that may impact their business. Staying on top of monitoring security protocols, preventing and responding to security incidents, and having a plan of […]
SOC 2 CC7: Common Criteria related to System Operations Read More »
What is SOC 2 Logical and Physical Access (CC6)? Organizations are responsible for controlling logical and physical access to their protected information by using appropriate security software,infrastructure, and architectures. Implementing and maintaining these necessary controls will protect your company’s valuable data and prevent unwanted security events. It will also help you meet the requirements outlined
SOC 2 CC6: Common Criteria related to Logical and Physical Access Read More »
What are SOC 2 Monitoring Activities (CC4)? Common Criteria (CC) 4 of the SOC 2 Common Criteria covers control monitoring activities recommended to be implemented. Do you have controls in place to perform proactive and reactive monitoring of your systems and controls? Are these proactive evaluations done in all your environments? These are questions you
SOC 2 CC4: Common Criteria related to Monitoring Activities Read More »
What is SOC 2 Risk Assessment (CC3)? Organizations need a firm understanding of enterprise risk assessments to not only properly handle risks within their organization, but to also obtain a clean SOC report thanks to the Common Criteria related to Risk Assessment (pgs. 20-25). When looking at this area, your Company needs to think carefully think
SOC 2 CC3: Common Criteria related to Risk Assessment Read More »
What is SOC 2 Communication and Information (CC2)? CC2 of the SOC 2 Common Criteria covers communication and information controls recommended to be implemented. Communication and Information, as with the other Common Criteria, incorporates COSO requirements. Developed by the Committee of Sponsoring Organization of the Treadway Commission (COSO), these requirements are used to continuously update
SOC 2 CC2: Common Criteria related to Communication and Information Read More »
What Is the SOC 2 Control Environment (CC1)? Out of the Common Criteria, the Control Environment (also known as CC1), addresses several entity level controls that are expected to be in place across the Company. Much like the Common Criteria 2 through 5, CC1 is based upon COSO and borrows from its requirements to use
SOC 2 CC1: Common Criteria related to the Control Environment Read More »
When you’re doing business with third parties, you may be exposing your organization to financial, operational, and reputational risks. While third-party suppliers may be necessary to run your business efficiently, you need to take proactive steps to mitigate risks. This is where vendor management and assessment programs come in. What is Vendor Management? Vendor management
Third Party Vendor Management: What You Need to Know Read More »
It can be easy to confuse the difference between a SOC 1 and SOC 2 assessment. Both frameworks attest to organizational control, but the frameworks vary in focus depending on audience and need. Keeping up with compliance regulations might be demanding, particularly if you are confused about where to start. What is a SOC Assessment?
SOC 1 vs. SOC 2: What is the Difference? Read More »
When there’s a cybersecurity breach, you need to act quickly. You need the right people and the right plan to mitigate the threat and any damage. A security incident response plan will help guide you through a formal investigation and remediation process. When there’s a significant cybersecurity incident, you don’t want to have to rely
Explained: Security Incident Response Plan Read More »
Have you ever been asked by a client for a bridge letter? Have you received one from a vendor, and you’re curious as to what it means? Is it an official document, or can anyone write and issue one? Read on to find out! What is a Bridge Letter? A bridge letter, also known as
Bridge Letter: Things You Should Know Read More »
