What are the SOC 2 Trust Services Criteria?

The SOC 2 audit process includes categories of Trust Services Criteria: Security, Availability, Confidentiality, Processing Integrity, and Privacy. These categories each cover a set of internal controls related to different aspects of your information security program. 

Continue reading “What are the SOC 2 Trust Services Criteria?”

What’s The Difference Between SOC 2 Type I and Type II?

The difference between a SOC 2 Type I audit and a SOC 2 Type II audit is how the controls are evaluated – at a single point in time, or over a period of time. This decision can be driven by budget, timing, resources available, and what customers are asking for. 

Continue reading “What’s The Difference Between SOC 2 Type I and Type II?”

What is a SOC 2 Report?

In a world filled with data breaches and information leaks, establishing trust is not only critical to driving revenue, it can also be a competitive differentiator for new business. A SOC 2 report helps demonstrate to customers and business partners that you take information security seriously. 

Continue reading “What is a SOC 2 Report?”

How European Companies Can Accelerate International Expansion with SOC 2 Compliance

The United States represents an attractive market for many European companies, but international expansion can be fraught with risk because of a completely different regulatory landscape. 
Continue reading “How European Companies Can Accelerate International Expansion with SOC 2 Compliance”

Ostendio Expands MyVCM Auditor Connect Marketplace with
A-LIGN Partnership

Reposted with permission, Ostendio Inc.

ARLINGTON, Va. – September 28, 2020 – Ostendio Inc., a leading provider of integrated risk management software, and A-LIGN, a security and compliance provider, today announced that A-LIGN is joining the MyVCM Auditor Connect™ marketplace offering customers more choices in their third party security and risk management audit firms. Continue reading “Ostendio Expands MyVCM Auditor Connect Marketplace with
A-LIGN Partnership”

The A-LIGN Advantage: Unify Your Audit Experience across Multiple Standards with a Single-Provider Approach

“Don’t swap horses in the middle of the stream.” – Abraham Lincoln

The emergence of automated security and compliance solutions still leaves organizations with a problem: these point solutions are unable to provide independent third-party certification. Continue reading “The A-LIGN Advantage: Unify Your Audit Experience across Multiple Standards with a Single-Provider Approach”

SOC Report Types: What You Need to Know

Organizations cannot afford to leave their clients’ trust to chance. They face complex pressures from customers, regulators and cyberattacks to implement appropriate controls within their environments to protect customer and proprietary data. Continue reading “SOC Report Types: What You Need to Know”

The New Normal:
Fully-Enabled Remote Audits

The new normal is anything but normal, but before we join in the chorus of “uncertain times” let’s take a moment to reflect on how standards organizations have responded to COVID-19 to enable remote audits so that organizations can continue to demonstrate trust. Continue reading “The New Normal:
Fully-Enabled Remote Audits”

SOC 2 Examinations for Colocation Service Providers

The framework and criteria for a SOC 2 examination are flexible and can be applied to many entities, including service organizations who work with an entity to provide a particular type of services (e.g. data backup services, cloud hosting services, managed IT services, incident management services, change management services, network security services, etc.). Continue reading “SOC 2 Examinations for Colocation Service Providers”