How to Perform a Risk Assessment (Part 1)
How do you perform a risk assessment, and what do you do with the results? Find out the answers to some common risk assessment questions in Part 1 of our two-part [...]
How to Read a SOC 2 System Description
In this blog, we’ll dive into one of the most important parts of a SOC 2 report, the SOC 2 System Description! During your due diligence process, a vendor sends [...]
HITRUST Validated Assessment: 5 Things to Prepare For
Preparing for your HITRUST Validated Assessment is no small task. With a little bit of preparation, you can ensure that the assessment goes smoothly. Below are five things that you [...]
Designing an Incident Response Program
Incident response is a critical aspect of any security program. A well-designed incident response program can greatly decrease the cost of a security incident or data breach. Additionally, it is [...]
ISO 27001 vs SOC 2: Choosing a Compliance Framework
In a previous blog post, we discussed the differences between SOC 2 vs ISO 27001. In this post, we will look at the factors affecting the decision of choosing which [...]
SOC 2 vs ISO 27001: What’s The Difference?
Navigating the ins and outs of two of the most popular compliance frameworks. When it comes to vendor due diligence, many companies are raising the bar. This article will help [...]
Common Misconceptions About the ISO 27001 Framework
Answering some of the most commonly asked questions around ISO 27001 implementation. At risk3sixty, we have helped many clients implement ISO 27001. Through this work, we have pinpointed a few [...]
Securing the Work-from-Home Environment During COVID-19
Tips for security administrators during the COVID-19 pandemic We have seen a massive increase in the number of employees working from home due to the COVID-19 pandemic. System administrators must [...]
How to Read a HITRUST Validated Assessment
Understanding the results of a HITRUST engagement and how to use them. During your vendor due diligence process, a vendor sends you their HITRUST report. What exactly does this report [...]
Performing Effective User Access Reviews
Correcting mistakes that arise in the day-to-day management of access control. Organizations can take many steps to manage access, such as adopting documented registration and de-registration processes, maintaining a [...]