Britney Oswald

A risk assessment should be considered a non-negotiable practice for any successful company for a host of reasons: Protection of physical and digital assets Legal and Regulatory Compliance Business Continuity Financial Stability and Cost Savings Improved decision making The risk assessment also happens to be one of the common criteria tested within the SOC 2 [...]

In a landscape where cyber threats are growing more sophisticated by the day, understanding an organization’s vulnerabilities is a strategic imperative for security and compliance. Conducting vulnerability scans is a key component in helping prevent successful external adversary attacks. In this article, I will discuss what vulnerability scans are, the common types, and actions your [...]

Passwords have always been a hot topic of discussion both in and out of security circles. Users have always hated being forced to come up with schemes to meet the complexity rules or change their passwords at defined intervals. The multitude of password requirements of the past have frustrated users and have led to bad [...]

During SOC readiness assessments, we are often asked about the key controls surrounding the security of assets in the cloud. Cloud patch management is a critical part of maintaining security, and the controls around this process will be reviewed in any cloud computing audit, like a SOC report. This article will provide guidance on creating [...]