Articles, page 13 of 27
-
Penetration Testing
Which Types of Vulnerability Scanners Can Help Protect Your Company?
There are several different types of vulnerability scanners, so how do you decide which one (or more) is right for your organization? Here is guidance to help.
By Jessica KielFebruary 14, 2024 -
Compliance
Zero Trust Concepts & Audit Implications
What is Zero Trust? Here is our comprehensive guide on Zero Trust concepts and their critical role in enhancing audit processes and governance frameworks.
By Richard RiebenFebruary 7, 2024 -
SOC 2
Navigating SOC 2 Scope for a Successful Audit - Professional Insights
Confused about SOC 2 audit scope? These insights will help you understand how to tailor an audit scope to meet your security, compliance, and business needs.
By Megan KovashJanuary 24, 2024 -
ISO
ISO and Risk Management Frameworks for Supporting Enterprise Risk Assessments
This breakdown compares several risk management frameworks, including ISO 31000 - similarities, differences, benefits, & why it's critical to your organization.
By Rhonda WillertJanuary 17, 2024 -
Penetration Testing
Stop Pen Testing Like It’s Y2K - How to Implement Continuous Penetration Testing
This breakdown explains why implementing continuous penetration testing is more effective than the annual model, including benefits, cost, & why it's important.
By L&Co Staff AuditorsJanuary 10, 2024 -
Compliance
The Transforming Landscape of Vendor & Third-Party Risk Management
Here is a breakdown of the vendor & third-party risk management process - from guidance for sharing data to monitoring & best practices for your organization.
By John PohlmannJanuary 3, 2024 -
HIPAA
HIPAA Authorization: Requirements & Consent for Disclosing PHI
Covered entities, under the Privacy Rule, cannot disclose protected health information without patient consent. Learn about HIPAA Authorization Requirements.
By Jaclyn FinneyDecember 27, 2023 -
SOC 2
Pitfalls to Avoid When Transitioning From a Type I to a Type II SOC Report
Learn from the mistakes of others and avoid these 5 common pitfalls when transitioning your organization from a Type I to a Type II SOC Report.
By Kevin AndersonDecember 20, 2023 -
Compliance
Access Control Issues - Principles for Success & Avoiding Common Pitfalls
Issues with access control can directly impact the outcome of an audit. Here is professional insight on some common pitfalls to avoid & principles for success.
By Tim NackosDecember 13, 2023 -
Compliance
A Guide to Microsoft’s Supplier Security Privacy Assurance (SSPA) Program
This guide breaks down Microsoft's Supplier Security Privacy Assurance (SSPA) program - what it is, and the requirements for compliance and audit assurance.
By Mark LarsonNovember 29, 2023 -
HITRUST
A Guide to HITRUST® Interim Assessments
This guide explains the ins and outs of a HITRUST interim assessment - what it is, when it is needed, if one can be completed, the timeline, and what to expect.
By Brian SandenawNovember 22, 2023 -
SOC 1
Critical Audit Matters (CAMs) & SOC 1 Reports - Could They Be Related?
What are critical audit matters (CAMs) and how are they related to your SOC 1 report? Learn how an exception or qualification may be a contributing factor.
By Lois ColbyNovember 15, 2023
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.