Notes from the Field: CIS Control 5 – Account Management

by Greg Halpin / June 13, 2023

Continuing the series on the Center for Internet Security (CIS) Controls, auditor Greg Halpin will explore the fifth CIS Control about account management and how he sees his clients implementing these requirements in the field.  As a reminder, the CIS controls are 18 information security controls that all organizations and information security professionals should be familiar with and implement to protect their networks from attackers.  The CIS overview for Account…

Ask an Auditor Anything: Recap of a Live Q&A Session  

by Tori Thurmond / March 21, 2024

The truth is that compliance is hard. We know that getting ready for an audit and remaining complainant is a year-round effort that can feel overwhelming.  Our clients often ask us what they can be doing to prepare for their next audit, how to stay on top of the ever-evolving industry, and how to tackle new cybersecurity trends. That’s why we decided to host a live Q&A session with our…

Expert Insight: A Few Quick Tips Regarding Logical Access 

by Lorna Willard / June 7, 2023

Data security is often seen as a burden, not a business-driving tactic. However, in today’s world with the proliferation of IT, the internet, the cloud, and risk associated with these systems and data, properly securing your data is essential to the success of your organization. Logical access is a key factor to data security that could easily be neglected, leaving your organization vulnerable to the growing threats of today’s security…

Notes from the Field: CIS Control 4 – Secure Configuration of Enterprise Assets and Software 

by Greg Halpin / May 31, 2023

Next up in our series on the Center for Internet Security (CIS) Controls auditor, Greg Halpin will dive into Control 04- Secure Configuration of Enterprise Assets and Software. As a reminder, the CIS Controls are 18 information security controls that all organizations and information security professionals should be familiar with and implement to protect their networks and data from attackers.   The CIS overview for Secure Configuration of Enterprise Assets and…

What to Expect from Your Audit

by Hannah Grace Holladay / September 6, 2023

Starting your first audit can be intimidating. Our first-time audit clients often ask the same question: how does the audit process work? At KirkpatrickPrice, the audit process can be broken down into 5 steps: 1. Kickoff call Every audit begins with a kickoff call. On this call, we will establish the timeline for the audit along with all audit objectives and expectations. 2. Document collection After the audit begins, we…