Articles, page 5 of 27
-
SOC 2
Defense in Depth: What It Is & How It Relates to SOC 2 Compliance
Move beyond checklist compliance. Learn how defense in depth creates resilient, layered security that earns client trust and strengthens your SOC 2 audit readiness.
By Umar AzizNovember 19, 2025 -
Compliance
Audit Risk & the Audit Risk Model (ARM): An Auditor's Complete Guide
Learn about audit risk, the audit risk model (ARM), and how to reduce risk in SOC 1/SOC 2 audits. An auditor's guide to acceptable risk levels & planning.
By Maggie CheneyNovember 12, 2025 -
SOC 2
SOC 2 Compliance Checklist: Why it Doesn’t Exist (And What to Do Instead)
There's no official SOC 2 compliance checklist from AICPA. Learn why, and get practical guidance on readiness assessments, timelines, and audit prep.
By Megan KovashNovember 5, 2025 -
Compliance
Vendor vs Subservice Organizations: Understanding the Difference & How it Affects You
Guide to subservice organizations vs vendors and how they impact your SOC audit. Learn reporting methods, CSOC requirements, and vendor management best practices.
By Becky McCartyOctober 29, 2025 -
HITRUST
HIPAA Compliance in the Cloud - An Auditor’s Guide
Moving to the cloud doesn't make you HIPAA or HITRUST compliant, it changes how you prove it. Learn what auditors actually expect for healthcare SaaS compliance.
By Rob PierceOctober 22, 2025 -
ISO
What Is ISO/IEC 27006-1:2024 & What Changed in the 2024 (2025 Transition) Edition?
Auditor's breakdown of what changed in ISO/IEC 27006-1:2024 and how it impacts certification bodies and organizations. Learn about the 2025 transition timeline.
By Rhonda WillertOctober 15, 2025 -
Penetration Testing
Types of Penetration Tests: A Look at Different Pentest Techniques & Tools
There are a number of different types of penetration tests & tools. Here is guidance to help you determine which pentest you need for your organization & why.
By L&Co Staff AuditorsOctober 8, 2025 -
FedRAMP
A Guide to GovRAMP: An Overview For Your Authorization Journey
Learn how GovRAMP authorization helps CSPs secure cloud services for state & local governments, including compliance steps, requirements & authorization paths.
By Ray DunhamOctober 8, 2025 -
Compliance
IT Security Compliance in Hospitality: A Friendly Field Guide from the Lobby to the Server Room
Navigate PCI, SOC 2, and ISO compliance in hospitality with practical strategies from the front desk to the server room. Protect guest trust efficiently.
By John PohlmannOctober 1, 2025 -
Compliance
Risk Governance - What Is It & Where Do I Start?
Learn what risk governance is, how it fits into GRC programs, and the essential steps to establish effective risk oversight in your organization.
By Helen ZellSeptember 24, 2025 -
HITRUST
Expert Guide to the HITRUST Certification Process & Assessment Types
Master the HITRUST compliance and certification process with this detailed guide covering all assessment types, AI security requirements, costs, and timelines.
By Richard RiebenSeptember 24, 2025 -
SOC 2
IT Governance (GEIT) & SOC 2: Navigating Today's Complex Risk Landscape
Learn how IT governance (GEIT) and SOC 2 compliance work together to address emerging risks like AI, data ethics, and supply chain vulnerabilities.
By Fred MaldonadoSeptember 17, 2025
Get in touch
Have a question an article didn't answer? Talk to a partner.
Get straightforward answers from experienced auditors.