Understanding the Audit Types for Debt Collectors and Collection Agencies

by Sarah Harvey / June 14, 2023

How SOC 1, SOC 2, PCI and FISMA Apply to Debt Collection If you’re performing collections, you’re no stranger to regulatory compliance and the proactive supervision of government agencies such as the Federal Trade Commission (FTC), Consumer Financial Protection Bureau (CFPB), and the Office for Civil Rights (OCR). It’s also critical to consider how you’re protecting consumer data and understand what information security audits are available and will best fit…

SOC 1 vs. SOC 2: Which SOC Report Do I Need?

by Sarah Harvey / December 19, 2022

SOC 1 vs. SOC 2 Reports: What's the Difference? As a service organization, you are familiar with audit requests from clients who are required to meet specific compliance and audit requirements, and you have most likely been asked whether your organization is SOC 1 compliant or SOC 2 compliant. We often get asked: What are the differences between a SOC 1 vs. SOC 2 audit? Which SOC report should you…

Mastering the PCI Audit Process Utilizing the Online Audit Manager Approach

by Sarah Harvey / February 5, 2024

It’s no secret that the PCI Data Security Standard is one of the most robust information security standards that exists. With approximately 400 controls, understanding all of the ins and outs of the standard can cause quite the headache without the proper resources and expertise. When selecting a third party Qualified Security Assessor (QSA) to perform your PCI audit, we recommend choosing an auditor that can help with readiness as…

SAS 70 Auditing Standard vs. SSAE 16 Report: What’s the Difference?

by Sarah Harvey / December 19, 2022

What’s the purpose of an SSAE 16 audit and should I pursue one? If you’re new to the world of information security audits, check out this comprehensive guide on the history of SSAE 16, why it replaced the SAS 70, and how becoming SSAE 16 compliant could benefit your business. Outsourcing critical business functions, such as IT or HR, is a common practice among many businesses, today. While outsourcing is…

Road to HIPAA Compliance: Using the NIST Cybersecurity Framework to Protect PHI

by KirkpatrickPrice / December 19, 2022

The NIST Cybersecurity Framework: A Common Language for Cybersecurity Issues The cybersecurity realm is overwhelming – the issues, the regulations, the changes, the threats, the persistence. We’re living in a world where we hear about new breaches every day. None of us can possibly know everything about all cybersecurity issues, and that’s okay. We’re all vulnerable and overwhelmed, but that’s no excuse not to prepare and continually develop your organization’s…