Articles, page 2 of 27
-
Compliance
What Is An Audit? An Auditor's Guide to What Actually Happens
Audits don't have to be intimidating. Learn what an audit is, the most common types, and what the process actually looks like from auditors who do this every day.
By Isaac ClarkeJuly 29, 2026 -
HIPAA
What is HIPAA Compliance? What Auditors Know That the Checklists Don't Tell You
There's no such thing as HIPAA certification, and that's just the start. Learn what HIPAA compliance actually requires, what OCR enforces, and what's changing.
By Rob PierceJuly 22, 2026 -
Compliance
Security Awareness Training Requirements: Who Needs It & What's at Risk
Not sure who needs security awareness training or what auditors expect? Learn who's included, the real risks of gaps, and how AI is changing the rules.
By Hilary StavrakasJuly 15, 2026 -
HIPAA
HIPAA Security Rule Requirements: What’s in Effect, What’s Changing, & What Are Auditors Seeing?
The HIPAA Security Rule faces its biggest proposed update in 20+ years. See what's required now, what's changing, and what auditors are already flagging.
By Danielle PeiJuly 8, 2026 -
Compliance
Don't be Caught Unawares: How to Preserve Audit Evidence when Decommissioning a System!
Decommissioning a system mid-audit cycle? Learn exactly what audit evidence to capture before it goes dark, from access controls to vendor reports and beyond.
By Helen ZellJune 24, 2026 -
Compliance
CCPA Cybersecurity Audit Requirements: What You Need to Know
CCPA cybersecurity audit rules took effect in 2026. Learn who's covered, what an independent auditor examines, and whether your program is in compliance.
By Kevin AndersonJune 17, 2026 -
HIPAA
The HIPAA Contingency Plan with a SOC 2 Spin
HIPAA contingency plan rules are changing in 2026. Learn what the five required components are, what auditors commonly find missing, and how to close the gaps.
By Umar AzizJune 10, 2026 -
SOC 2
SOC 2 Physical Security in a Remote-First World: What Auditors Actually Look For
Physical security doesn't disappear in a remote SOC 2: it shifts. Learn what moves to your cloud provider and what auditors still expect from you.
By Jessica KielJune 3, 2026 -
SOC 1
What Happened to SAS 70? Understanding SOC 1 Reports Today
SAS 70 is no longer used, but many vendors still reference it. Learn what replaced SAS 70, how SOC 1 reports work, and what to review in a vendor report.
By Maggie CheneyMay 20, 2026 -
HIPAA
SOC 2 vs. HIPAA Compliance: What Auditors See When Organizations Confuse the Two
SOC 2 and HIPAA often overlap, but they are not interchangeable. Learn when healthcare vendors may need both and where the biggest audit gaps appear.
By Megan KovashMay 13, 2026 -
SOC 2
What is Data Security? What SOC 2 Auditors Look For in Practice
Data security gaps are rarely obvious until an auditor finds them. Learn what SOC 2 auditors actually look for and how to close the gaps before they do.
By Becky McCartyMay 6, 2026 -
ISO
ISO/IEC 27001:2022 Clauses: Moving Beyond a Compliance Checklist
Struggling to move beyond a checklist? Learn how ISO 27001's mandatory clauses (4 to 10) build a resilient, audit-ready ISMS: with real-world examples.
By Rhonda WillertApril 29, 2026
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.