Can an Auditor Withdraw from an Audit?

by Joseph Kirkpatrick / June 15, 2023

When you choose an audit firm to start the audit process, you’re choosing a partner. You want an auditor who is highly experienced, can communicate well, and knows how to support your organization on its compliance journey. Once you find an audit firm that meets your expectations, your organization will need to continue building a good relationship with your auditor throughout the audit process. It doesn’t stop at signing a…

What is IoT Penetration Testing?

by Sarah Harvey / December 15, 2022

The technology that consumers use every day is becoming smarter and smarter – locks, mirrors, cars, refrigerators, speakers, watches, thermostats, printers, security cameras. Internet of things (IoT) technology is making daily tasks easier, but how secure is this technology? It’s your job as the developer of IoT technology to make sure that the information transmitted through these devices is secure so that the consumer doesn’t have to worry. IoT devices…

What is the Difference Between Phishing and Spear-Phishing?

by Sarah Harvey / June 14, 2023

Imagine this...Your employee, Kevin, sits down at the office and opens his email inbox. The first message is from the CEO of your company, Chris, with the subject line “Priority Task” The email seems urgent. He opens it quickly and reads his task. Because Kevin wants to quickly complete this task for his employer, he rushes to reply. He follows the instructions he receives in a follow-up email, which leads…

How to Avoid a Never-Ending Audit

by Joseph Kirkpatrick / June 15, 2023

There are many decisions that organizations need to consider when choosing an audit firm, like cost, expertise, location, timeline, and audit process. You need to be confident in who's performing your audit, especially in a clear, accurate audit process. If not, you’re risking a case of the never-ending audit. The Audit That Never Ends A never-ending audit is one where you’re revisiting the same tasks time and time again with…

What is API Penetration Testing?

by Sarah Harvey / December 15, 2022

APIs have led to digital transformation within the cloud, IoT, and mobile and web applications. Without knowing it, the average person engages with multiple APIs every day, especially on mobile. APIs are the connective tissue responsible for transferring information between systems, both internally and externally. All too often, though, deployed APIs do not go through comprehensive security testing, if tested for security at all. Whether SOAP or REST, a poorly…