SOC 2 Success in 5 Simple Steps
How can you ensure success for your company’s SOC 2 initiative? Here are 5 Steps to SOC 2 success – best practices and lessons learned from the field!
I have yet […]
Understanding SOC 2 Opinions
If you just received a SOC 2 report and do not know where to start analyzing, this blog is for you!
SOC 2 reports can easily reach 50+ pages and can […]
ISO 27001 vs SOC 2: Choosing a Compliance Framework
In a previous blog post, we discussed the differences between SOC 2 vs ISO 27001. In this post, we will look at the factors affecting the decision of choosing […]
SOC 2 vs ISO 27001: What’s The Difference?
Navigating the ins and outs of two of the most popular compliance frameworks.
When it comes to vendor due diligence, many companies are raising the bar. This article will help […]
Webinar: SOC 2: Everything You Need to Get a SOC 2 Report
Check out our webinar from Christian White and Christian Hyatt in which they cover the basics of SOC 2 reporting, what to expect during a SOC 2 audit, and why […]
How to Create Effective Policies
How to leverage information security policies into leveling up your security program.
risk3sixty Successfully Completes Peer Review
At risk3sixty, we pride ourselves on craftsmanship. It is one of our core values. As a result, every engagement follows a rigorous quality standard and multiple levels of internal […]
Are Pen Test and Vulnerability Scans Required for a SOC 2 Report?
Are Pen Test and Vulnerability Scans Required for a SOC 2 Report? There has been much confusion lately in the SOC 2 market as companies seek to understand the need-to-haves vs. the nice-to-haves when it comes to obtaining a SOC 2 report. Much of this confusion was brought about by the December 2018 upgrade of the Trust Services Criteria, and associated Point of Focus, intended to align SOC 2 with the 2013 COSO framework.
What is the Difference between SOC 2 Type I and SOC 2 Type II?
If your clients or prospects have requested a SOC 2 report, obtaining a SOC 2 report typically follows a three step process.
Step 1: Readiness Assessment
A readiness assessment helps your organization […]
Quality Work Does Not Mean Quality Service
Quality Work Does Not Mean Quality Service
“Managing the Professional Services Firm” by David Maister is considered to be “core canon” among consulting professionals. Though it was originally published over 25 […]