Articles
-
Compliance
Cloud Security Compliance Audits: Are You Audit Ready?
Failing a cloud security audit can block funding and lose clients. Learn what auditors look for, common pitfalls, and how to prepare before your next review.
By Jaclyn FinneyMarch 25, 2026 -
Compliance
What Do Auditors Do? Understanding an Auditor’s Responsibilities
What is an auditor and what do they do? Learn auditor responsibilities, types, required skills, professional guidelines, and key qualifications in this guide.
By Jaclyn FinneySeptember 10, 2025 -
ISO
What is ISO? A Guide to Security Standards & Compliance
Learn about the ISO, how it shapes global security standards, and what you need to know about ISO compliance. Discover key benefits and steps for implementation.
By Jaclyn FinneyFebruary 12, 2025 -
Compliance
How Much Does CISA Cost? Good News - Tools Are Free!
Many businesses aren't aware of the free tools & resources available for use from CISA. We cover what's available to maintain your organization's cybersecurity.
By Jaclyn FinneyMay 29, 2024 -
HIPAA
HIPAA Authorization: Requirements & Consent for Disclosing PHI
Covered entities, under the Privacy Rule, cannot disclose protected health information without patient consent. Learn about HIPAA Authorization Requirements.
By Jaclyn FinneyDecember 27, 2023 -
SOC 2
SOC 2 Considerations for SaaS Providers from an Audit Professional
Here's professional guidance on how SOC 2 audits affect SaaS providers - if and when you need a SOC 2 report and what criteria are needed to achieve compliance.
By Jaclyn FinneyMarch 15, 2023 -
Penetration Testing
Vulnerability Management Maturity Model, Procedures, Threats, & More
What is the vulnerability management maturity model? Here is auditor insight into how it affects vulnerability management, procedures, life cycles, and more.
By Jaclyn FinneyJune 1, 2022 -
Compliance
What Are Internal Controls? The 4 Main Types of Controls in Audits (with Examples)
What are Internal Controls? Learn the types of controls: how they work, their purpose, importance, examples & how they protect your service organization.
By Jaclyn FinneyJanuary 25, 2022 -
SOC 2
SOC Incident Reporting: What are SOC 2 Security Reporting Requirements?
Cyber attacks are on the rise. As a result, it's imperative that your organization has proper guidance for SOC cybersecurity incidents & reporting requirements.
By Jaclyn FinneyOctober 13, 2021 -
HITRUST
Navigating Compliance Frameworks: SOC 2 vs. HITRUST®
Determining whether your company needs a SOC 2 report or a HITRUST certification generally depends on a number of different variables. What are the differences?
By Jaclyn FinneyJuly 7, 2021 -
Compliance
AICPA Peer Reviews - Who Audits the Auditor?
Organizations regularly undergo various types of audits...but who audits the auditors? Here is a breakdown of AICPA peer reviews and industry standards.
By Jaclyn FinneyApril 7, 2021 -
Compliance
Materiality in Auditing: How to Prepare For Your Audit
What is materiality and how does it relate to your upcoming attestation? This article will help you to understand the process of materiality in auditing
By Jaclyn FinneyOctober 14, 2020
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.