One Audit Firm, One Platform: A Journey to Settling Down

by Madison Lenhart / May 9, 2025

They had a vision for an 'audit once, apply to many' strategy, aligning controls across platforms, auditing controls once, and applying those controls across multiple products or frameworks. The Challenge They are a 10,000-person enterprise whose SaaS business had grown through acquisitions. In 2023, their compliance team was managing twenty-two audits across five different audit firms and multiple frameworks utilizing a multitude of audit platform tools. This resulted in inconsistent…

Softdocs Levels-Up Their Compliance Program with StateRAMP Audit from KirkpatrickPrice

by Hannah Grace Holladay / May 6, 2025

Audits are hard, but when you partner with a firm like KirkpatrickPrice, it will be worth it. That's exactly what Softdocs learned when they asked us to be their partner on their newest compliance initiative: become compliant with the NIST 800-53 framework via a StateRAMP audit within one year. Learn exactly how we worked together to make sure this audit journey ended in success. About Softdocs Softdocs provides process automation and…

Top 10 Ways to Prepare for Your SOC 1 Audit

by Tori Thurmond / May 20, 2024

If your customers rely on you to protect consumer information, chances are you may be asked to produce a SOC 1 audit report. A SOC 1 audit reports on the controls at an organization that are relevant to, or may affect, a client’s financial statements. This reporting framework is designed to demonstrate that an organization has proper internal controls and processes in place to address information security and compliance risks.…

An Earth Day Reminder: How to Take Care of Your Security Environment

by Tori Thurmond / April 22, 2024

Happy Earth Day! I hope you get to spend some time outside today to take in mother nature in all of her glory, but while I have you here, I want to discuss a different type of environment: your security environment.   Just as with the environment around us, we have to take care of our organization’s security environment to keep our data healthy, happy, and, most importantly, secure. There’s are…

Threat Informed Defense (Part 1): Threat Simulation [A Webinar Recap]

by Tori Thurmond / May 20, 2024

Cyber threats pose significant risk to organizations worldwide, ranging from financial loss to reputational damage to operational disruptions. These ever-evolving threats can be intimidating, but with the right preparation, organizations can proactively mitigate risks and fortify their overall cybersecurity posture. One way to offensively protect your organization from the treat landscape is through threat simulation.   This week, our VP of Pen Testing, Jason Rowland, kicked off our three-part Threat…