Establishing an InfoSec program enables your organization to build trust quickly so you can sell more. Without an effective security program, you’re exposed and vulnerable to countless numbers of...
Read Article
Cutting-edge technology and highly trained team members protect the US government’s classified data. But what about unclassified data? A distinction that seems clear at first glance becomes blurry...
Read Article
Software-as-a-service (SaaS) companies will see significant growth in the coming years as the reliance on SaaS solutions continues to grow. According to Forbes, SaaS revenues are projected to...
Read Article
This article recaps CEO Ray Kruck’s live workshop of the same name at SaaStr Annual 2021. Many executives see cybersecurity as a cost center—and understandably so. On average, it accounts for...
Read Article
Our mission has always been to make security and compliance accessible—especially to startups who might lack the resources to build an InfoSec program, get compliant and leverage these competitive...
Read Article
It’s a common misconception that threat actors, individuals behind online attacks, live outside an organization but it’s often internal employees that are your biggest cyberthreat. Whether it’s...
Read Article
Risk is one of the most important components of your InfoSec program. Most companies complete their first risk assessment to fulfill SOC 2 or ISO 27001 requirements, but risk management becomes a...
Read Article
Welcome to part four of SOC 2 Bootcamp, covering everything involved in the audit process, including understanding your report and how to use it! Quick bootcamp run down—we borrowed Bluth Company...
Read Article
Welcome to part three of SOC 2 Bootcamp, covering everything involved in evidence collection! Quick Bootcamp recap—we borrowed Bluth Company and Associates from Arrested Development. Monica works...
Read Article
There are hundreds of complex laws and regulations worldwide that organizations find themselves required to follow to keep their data safe. Two of the most common in North America are NIST CSF and...
Read Article
California is the birthplace of skateboards, Barbie dolls, arcade games, McDonald’s, the internet, and the California Consumer Privacy Act (CCPA). Maybe it’s not as glamorous as the bright lights...
Read Article
You’re a busy and important person, with many plates to spin and deals to win. I get that! Understandably, sometimes things fall through the cracks, but can you really handle hefty fines or the...
Read Article
Did you know that 76% of enterprises lack a clearly defined enterprise IT risk assessment and management strategy? As a result, it’s challenging to get your executive team to buy into your risk...
Read Article
Welcome to part two of SOC 2 Bootcamp coving policies and controls! Quick refresher—we borrowed Bluth Company and Associates from Arrested Development. Monica works for Bluth Company and is in...
Read Article
Knowing who your vendors are, how they manage their risks and the impact it could have on your company is a crucial piece of your InfoSec program. It’s also a requirement for SOC 2, ISO 27001,...
Read Article
Last year, to protect Controlled Unclassified Information and Federal Contract Information, the US Department of Defense (DoD) announced the Cybersecurity Maturity Model Certification or CMMC. As...
Read Article
A risk treatment plan (RTP) is an essential part of an organization’s InfoSec program. In fact, ISO 27001 requires an RTP while SOC 2 and other frameworks ask for similar documentation. A solid...
Read Article
You’re in a cold sweat. A customer or prospect needed you to be SOC 2 compliant yesterday. But it’s today, and you’re still not SOC 2 compliant. So, you Google SOC 2 to understand what you’re...
Read Article
You probably have customers asking you all the time if you’re SOC 2 compliant. You’re not yet, but you know it’s important. So you do a little Googling. Where do you start? Who needs to be...
Read Article
Real Security Assurance Takes Real Commitment Being able to demonstrate security compliance can open doors for SaaS companies. After successfully completing the SOC 2 or ISO 27001 audit processes,...
Read Article
Loading More...
