Articles, page 14 of 27
-
SOC 1
Critical Audit Matters (CAMs) & SOC 1 Reports - Could They Be Related?
What are critical audit matters (CAMs) and how are they related to your SOC 1 report? Learn how an exception or qualification may be a contributing factor.
By Lois ColbyNovember 15, 2023 -
Compliance
Business Continuity vs. Disaster Recovery: The Building Blocks for Preparation
What is business continuity vs disaster recovery? We break down the differences between these recovery plans, as well as when & why they should be implemented.
By Hilary StavrakasOctober 11, 2023 -
HITRUST
What is HITRUST®? A Comprehensive Guide to HITRUST Assessments
What is HITRUST? Why is it important? This guide covers the benefits, requirements, who needs certification, how it compares to other frameworks, & more.
By Richard RiebenOctober 4, 2023 -
AI & Emerging Risk
Enhancing Your Company’s AI Security Policy - Professional Insights
As the use of AI continues to grow, it has become crucial to implement an AI security policy. Here are insights on what to consider and why it's important.
By Ben BurkettSeptember 27, 2023 -
ISO
ISO Certificate Verification: Considerations & Guidance
ISO certification is necessary for the standardization & quality assurance of an organization. This guide explains what to look for to verify its validity.
By Rhonda WillertSeptember 20, 2023 -
Compliance
Access Control Management - Guidance for Audit Compliance
What are access management controls & how do they affect your internal control environment? We cover types & examples of access controls, IAM tools, & benefits.
By Megan KovashSeptember 13, 2023 -
Compliance
What is Data Classification? Levels, Compliance, & Standards to Follow
When it comes to compliance, data classification is critical. This includes understanding how data should be maintained & protected within your organization.
By Maggie CheneyAugust 30, 2023 -
SOC 2
Business Continuity Planning: Why It’s Essential for Sustainable Success
What is a Business Continuity Plan (BCP)? From what it should include, to testing, to SOC 2 audit considerations, here's what you should know & why it's critical.
By John PohlmannAugust 23, 2023 -
Compliance
Understanding Audit Procedures: A Guide to Audit Methods & Test of Controls
Learn the 5 types of testing methods used during audit procedures for Type 2 SOC engagements, required to analyze service organization audit test of controls.
By Nicole HemmerAugust 9, 2023 -
SOC 2
Monitoring Controls at Subservice Organizations
What is the best way to monitor the effectiveness of controls used by your subservice organization for your SOC report? Here is helpful guidance from an auditor.
By Kevin AndersonJuly 19, 2023 -
AI & Emerging Risk
SOC 2 Audit Considerations for AI & ML Subservice Organizations
More & more subservice organizations are providing artificial intelligence & machine learning services. How are they audited? Here are SOC 2 considerations.
By Lois ColbyJuly 5, 2023 -
Compliance
The Link Between Risk & Controls - Guidance for Monitoring
What is the link between risk and controls, and how should your organization effectively monitor them? Here is guidance to map and mitigate those risks.
By Jessica KielJune 28, 2023
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.