Articles, page 4 of 27
-
ISO
Performing CSA-STAR Certification Audit in Conjunction with ISO/IEC 27001
Combining CSA STAR Level 2 with ISO 27001? Discover what you need to know about maturity scoring, CAIQ requirements, and integrated audit planning.
By Lois ColbyFebruary 18, 2026 -
SOC 2
The Commoditization of Trust: How the Assurance Industry is Selling Out
Not all SOC 2 audits are equal. Low-cost firms compromise rigor for speed, leaving organizations exposed. Here's why paying for quality protects your business.
By Richard RiebenFebruary 11, 2026 -
SOC 2
Mobile Security Threats: The Hidden Risk in Your SOC Readiness Preparation
From weak passwords to unsecured Wi-Fi, learn which mobile security threats our SOC 2 auditors consider in their reviews, and how to address them before your audit.
By Becky McCartyJanuary 28, 2026 -
HIPAA
HIPAA Compliance Audits: What Healthcare Organizations Need to Know
Worried about HIPAA audit readiness? Learn what triggers audits, how to prepare, and proven methods to demonstrate compliance that satisfy clients and regulators.
By Rob PierceJanuary 21, 2026 -
SOC 2
The SOC 2 Risk Assessment Criteria: Through the Eyes of an Auditor
Discover what auditors actually evaluate in SOC 2 risk assessments. Learn the 7 criteria, common failures, and how to align CC3, CC5, and CC9 effectively.
By Britney OswaldJanuary 14, 2026 -
Compliance
OS & Environment Hardening: Why System Security Matters & Key Considerations
Learn operating system and environment hardening steps, benefits, and auditor considerations. Reduce your attack surface with practical security guidance.
By Hilary StavrakasJanuary 7, 2026 -
ISO
ISO/IEC 27017: A Practical Guide to Cloud Security & Certification
Learn how ISO 27017 extends ISO 27001 for cloud security. Discover the 7 unique controls, certification roadmap, and how it compares to SOC 2 compliance.
By Rhonda WillertJanuary 7, 2026 -
Compliance
Mobile Device Management Guide: Work From Anywhere, Protect From Everywhere
Discover MDM best practices to secure your mobile workforce. Learn how mobile device management protects data, reduces risks, and supports BYOD programs.
By Danielle PeiDecember 17, 2025 -
Compliance
Audit Analytics: How to Use Data for Internal Audits & Why It’s Important
Learn the key benefits of audit data analytics for internal audit teams, plus practical guidance on overcoming common challenges, tools, and getting started.
By Tim NackosDecember 16, 2025 -
AI & Emerging Risk
Black Box Testing AI Systems: Processing Integrity in SOC 1 & SOC 2 Audits
Learn how auditors approach black box testing for AI systems in SOC 1 and SOC 2 audits. Discover essential controls for processing integrity and trust.
By Ben BurkettDecember 10, 2025 -
Compliance
User Access Reviews Best Practices: Fix Permission Risks Before Audits Find Them
Learn 8 user access review best practices to strengthen security, prevent privilege creep, and simplify compliance audits with this guidance from a SOC 2 auditor.
By Kevin AndersonDecember 3, 2025 -
SOC 2
Defense in Depth: What It Is & How It Relates to SOC 2 Compliance
Move beyond checklist compliance. Learn how defense in depth creates resilient, layered security that earns client trust and strengthens your SOC 2 audit readiness.
By Umar AzizNovember 19, 2025
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.