The Best GDPR Toolkit and Checklist
In a world where data flows everywhere constantly, it’s important to check all the data protection and security boxes so we’ve put together some tips and tricks to help you build your own GDPR...
Read Article
-
-
Trust Part 2: Your Biggest Competitive Differentiator For Attracting and Retaining Top Talent
This article recaps our VP Customer Success, Chief Diversity Officer Sydney Archer’s virtual workshop of the same name at SaaStr Annual 2021. Read Trust Part 1: Your Biggest Competitive...
Read Article
-
Trust Part 1: Your Biggest Competitive Differentiator With Customers and Investors
This article recaps the first part of our VP Customer Success, Chief Diversity Officer Sydney Archer’s virtual workshop of the same name at SaaStr Annual 2021. Business trust incidents are on the...
Read Article
-
The Top 5 Security Questions Your Board Is Likely to Ask
Cyber risk is rising, prompting the board and senior leadership to ask more questions about cybersecurity. How bad is it out there? What about what happened to our competitors? How are we compared...
Read Article
-
Top 3 Things Every InfoSec Program Should Have
Establishing an InfoSec program enables your organization to build trust quickly so you can sell more. Without an effective security program, you’re exposed and vulnerable to countless numbers of...
Read Article
-
Tugboat Logic to Join Forces With OneTrust
Our mission has always been to make security and compliance accessible—especially to startups who might lack the resources to build an InfoSec program, get compliant and leverage these competitive...
Read Article
-
Employees and Cyberthreats: To Err Is Human and Costly
It’s a common misconception that threat actors, individuals behind online attacks, live outside an organization but it’s often internal employees that are your biggest cyberthreat. Whether it’s...
Read Article
-
SOC 2 Bootcamp Part 4: The Audit
Welcome to part four of SOC 2 Bootcamp, covering everything involved in the audit process, including understanding your report and how to use it! Quick bootcamp run down—we borrowed Bluth Company...
Read Article
-
SOC 2 Bootcamp Part 3: Evidence Collection
Welcome to part three of SOC 2 Bootcamp, covering everything involved in evidence collection! Quick Bootcamp recap—we borrowed Bluth Company and Associates from Arrested Development. Monica works...
Read Article
-
NIST vs ISO Compliance: What’s the Difference?
There are hundreds of complex laws and regulations worldwide that organizations find themselves required to follow to keep their data safe. Two of the most common in North America are NIST CSF and...
Read Article
-
The Basics of CCPA
California is the birthplace of skateboards, Barbie dolls, arcade games, McDonald’s, the internet, and the California Consumer Privacy Act (CCPA). Maybe it’s not as glamorous as the bright lights...
Read Article
-
The Importance of a PCI DSS Self-Assessment Questionnaire
You’re a busy and important person, with many plates to spin and deals to win. I get that! Understandably, sometimes things fall through the cracks, but can you really handle hefty fines or the...
Read Article
-
Tips and Tricks for Enterprise IT Risk Assessments
Did you know that 76% of enterprises lack a clearly defined enterprise IT risk assessment and management strategy? As a result, it’s challenging to get your executive team to buy into your risk...
Read Article
-
SOC 2 Bootcamp Part 2: Policies and Controls
Welcome to part two of SOC 2 Bootcamp coving policies and controls! Quick refresher—we borrowed Bluth Company and Associates from Arrested Development. Monica works for Bluth Company and is in...
Read Article
-
How to Perform a Vendor Risk Assessment
Knowing who your vendors are, how they manage their risks and the impact it could have on your company is a crucial piece of your InfoSec program. It’s also a requirement for SOC 2, ISO 27001,...
Read Article
-
The Basics of a Risk Treatment Plan
A risk treatment plan (RTP) is an essential part of an organization’s InfoSec program. In fact, ISO 27001 requires an RTP while SOC 2 and other frameworks ask for similar documentation. A solid...
Read Article
-
SOC 2 Bootcamp Part 1: Scoping and Auditor Selection
You probably have customers asking you all the time if you’re SOC 2 compliant. You’re not yet, but you know it’s important. So you do a little Googling. Where do you start? Who needs to be...
Read Article
-
SOC 2 Cost Guide
The SOC 2 cost guide has been our most popular download every month since it was first released. It’s become highly popular because it outlines SOC 2 audit costs, certification costs, compliance...
Read Article
-
The Basics of GDPR
Boiling the GDPR down to basics sounds too good to be true, but we did it. Doesn’t 2018 seem like a lifetime ago? Teens were eating Tide Pods, Prince Harry and Meghan Markle’s wedding dominated...
Read Article
-
A SOC 2 Report Example
Have you seen a SOC 2 report example before? Well, now you can say that you have! Today, we’re going to break down a SOC 2 report example, so you know what to look out for when yours arrives. ...
Read Article
-
Loading More...
