InfoSec Best Practices

Evaluating and assessing your employees regularly will maintain momentum and ensure they continue to fulfill...

One of the more important security controls in any organization’s security program is access controls,...

Kubernetes, containers, and serverless have been part of the “new stack” that everyone talks...

“When we came across Tugboat, I was like, ‘Man, this is exactly what I’m looking for!’ And the more I...

We often get asked by prospects and customers whether they should get a SOC 2 vs. SOC 3 certification, and...

Our customers frequently ask us, “Which controls are most often missed or incomplete during SOC 2...

Control of the Week #9 – Employee Handbook and Code of Conduct, and Code of Ethics This week’s...

If you’re looking for thorough answers to your questions around passing SOC 2 audits remotely or whether...

Control of the Week #8: Background and Reference Checks This week’s control is on background and reference...

Straightforward, non-salesy advice on how to choose auditors for security certifications like SOC 2 is...

Control of the Week #7: Password Control This week’s control is on passwords. Jose Costa (CISO at Tugboat...

Control of the Week #6: Administrative Access This week’s control is on risk assessments. Jose Costa (CISO...