Articles
-
Compliance
CCPA Cybersecurity Audit Requirements: What You Need to Know
CCPA cybersecurity audit rules took effect in 2026. Learn who's covered, what an independent auditor examines, and whether your program is in compliance.
By Kevin AndersonJune 17, 2026 -
Compliance
User Access Reviews Best Practices: Fix Permission Risks Before Audits Find Them
Learn 8 user access review best practices to strengthen security, prevent privilege creep, and simplify compliance audits with this guidance from a SOC 2 auditor.
By Kevin AndersonDecember 3, 2025 -
SOC 2
SOC 2 Controls: Developing a SOC 2 Control List
Learn to identify and implement the right SOC 2 controls for your organization, including TSC guidance, points of focus, and practical examples.
By Kevin AndersonFebruary 5, 2025 -
SOC 2
SOC 2 Type 2 Reports - A Comprehensive Guide
What is a SOC 2 type 2 report? This comprehensive guide breaks down what you need to know for compliance and answers your most commonly asked questions.
By Kevin AndersonMay 22, 2024 -
SOC 2
Pitfalls to Avoid When Transitioning From a Type I to a Type II SOC Report
Learn from the mistakes of others and avoid these 5 common pitfalls when transitioning your organization from a Type I to a Type II SOC Report.
By Kevin AndersonDecember 20, 2023 -
SOC 2
Monitoring Controls at Subservice Organizations
What is the best way to monitor the effectiveness of controls used by your subservice organization for your SOC report? Here is helpful guidance from an auditor.
By Kevin AndersonJuly 19, 2023 -
SOC 2
Understanding Information & Communication: Controls & Criteria for SOC 2
Here is professional guidance on the information & communication criteria & related controls that must be implemented in order to ensure SOC 2 audit compliance.
By Kevin AndersonMarch 8, 2023 -
SOC 2
Data Retention Policy: What is it & How Does it Relate to a SOC 2?
What is a data retention policy & why is it important to your organization? Here is guidance for compliance & how it could affect your upcoming SOC 2 audit.
By Kevin AndersonSeptember 28, 2022 -
SOC 2
Board of Directors - Is One Required For a SOC 2 Audit?
How do you know if you need a board of directors for your company, and for SOC 2 audit compliance? Here are insights from an auditor on what you need to know.
By Kevin AndersonMay 18, 2022
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.