What Is ISO 27001 Certification?

ISO 27001 compliance sounds complicated but we’ve broken down the essential components of ISO 27001 certification so you can use your InfoSec program as a substantial business advantage.

Video Case Study: How Tugboat Logic Helped Lone Star to “Manage Their Own Compliance Destiny”

Learn how Tugboat Logic helped Lone Star Analysis get compliant with SOC 2 and ISO 27001 on a tight deadline. By attaining both standards, they were able to provide security assurance to a large channel partner in the oil and gas sector and win new business. “For us to be able to play ball with Video Case Study: How Tugboat Logic Helped Lone Star to “Manage Their Own Compliance Destiny”

Top 7 SOC 2 Myths Debunked

We’re going to set the record straight by debunking some of the biggest SOC 2 myths we’ve heard. Read on to learn more.

What Is a SOC 2 Audit?

In this article, we’ll define, in plain language, the basic components of a SOC 2 audit and give you the information you need to start formulating a plan of attack.

Introducing the Risk Assessment Module

TL;DR Tugboat Logic’s Risk Assessment Module guides you through the process of conducting a risk assessment by providing recommendations of which IT and security risks to consider, how to best mitigate these risks, and automatically tracking the compliance of mitigating controls. The Risky Business of Risk Assessments Risk assessments are mandatory for passing your audits Introducing the Risk Assessment Module

Backup and Recovery Process: Choose It or Lose It

Despite our best efforts, sometimes things go wrong. The best way to handle situations should they arise, is to have a plan to act in advance, and keep that plan updated when threats change. This not only covers risks to your data by bad actors but plans in the event of a server outage or a natural disaster as a few examples.

The Compliance Debt Factor

There is a business reality that too many startups, and even later-stage companies, fall victim to: not having a clear and well-structured action plan for security and privacy. This security shortfall suddenly comes front and center at quarter end when that must-have enterprise deal slips away due to compliance requirements. This growing deficit is what The Compliance Debt Factor

Why Did We Get ISO 27001 Certified?

Others Avoid It, We Said “Challenge Accepted” From the beginning, Tugboat Logic’s goal has been to demystify the complexities of information security. While no one enjoys being audited, this inevitability is what fuels us to constantly improve upon our product. So while we didn’t have an external party requiring us to get ISO 27001 certified, Why Did We Get ISO 27001 Certified?