Selecting the right partner to assist with SOC 2 compliance (or anything else) can be challenging. If you are trying to sort through the marketplace t…
If you are trying to determine if your company would benefit from obtaining a SOC report, here are a few questions and answers that may help make the …
This past week I sat for the (ISC)2 CISSP exam and passed on my first attempt! With the entire preparation and test taking experience still fresh on m…
The first thing I try to explain to new auditors (or clients going through an audit for the first time) is what techniques IT auditors use to audit. M…
This past December I took the ISACA CISA exam and I’m pleased to announce that last week, I got my confirmation letter stating that I passed in the to…
What is a Malicious File Execution Vulnerability? Malicious file execution vulnerabilities (also called File Inclusion Vulnerabilities) is a vulnerabi…
Stateful refers to the “state” of the connection between the outside internet and the internal network. A stateful firewall keeps track of the connect…