Auditing Basics: What is a Gap Analysis?

by Joseph Kirkpatrick / May 10th, 2019

Do You Need a Gap Analysis? If it’s your first time pursuing compliance for any framework - whether it’s SOC 1, SOC 2, PCI…

Auditing Basics: What are Control Objectives?

by Joseph Kirkpatrick / May 3rd, 2019

What are Control Objectives? Control objectives are statements that address how risk is going to be effectively managed by an organization, and your auditor…

Auditing Basics: What is an Assertion?

by Joseph Kirkpatrick / May 3rd, 2019

What is Management's Written Assertion? At the beginning stages of the SOC 1 or SOC 2 audit process, an organization will be asked to…

SOC 2 Academy: Documentation of Inputs

by Joseph Kirkpatrick / April 12th, 2019

Processing Integrity Criteria 1.5 When an organization pursues SOC 2 compliance, an auditor will verify that they comply with the common criteria listed in…