A risk assessment should be considered a non-negotiable practice for any successful company for a host of reasons: Protection of physical and digital assets Legal and Regulatory Compliance Business Continuity Financial Stability and Cost Savings Improved decision making The risk assessment also happens to be one of the common criteria tested within the SOC 2 […]
Britney Oswald (Audit Manager | CPA)
Britney Oswald specializes in SOC reporting and has eight years of experience performing IT and controls audits as both an internal and external auditor. In addition, she has experience as a Financial Controller implementing systems and processes within growing businesses. Her favorite part of the job is helping clients implement controls that are right-sized for their organization.
Vulnerability Scanning: Importance of Vulnerability Scans in SOC 2 Audits
In a landscape where cyber threats are growing more sophisticated by the day, understanding an organization’s vulnerabilities is a strategic imperative for security and compliance. Conducting vulnerability scans is a key component in helping prevent successful external adversary attacks. In this article, I will discuss what vulnerability scans are, the common types, and actions your […]
Understanding the New NIST Password Guidelines for 2024
Passwords have always been a hot topic of discussion both in and out of security circles. Users have always hated being forced to come up with schemes to meet the complexity rules or change their passwords at defined intervals. The multitude of password requirements of the past have frustrated users and have led to bad […]
Cloud Patch Management Importance & Impact on SOC Reports
During SOC readiness assessments, we are often asked about the key controls surrounding the security of assets in the cloud. Cloud patch management is a critical part of maintaining security, and the controls around this process will be reviewed in any cloud computing audit, like a SOC report. This article will provide guidance on creating […]







