Writing a Change Management Policy
by Sarah Harvey / March 2nd, 2020
Policies and procedures are nothing new in the world of information security. One of the best things you can do to secure your environment…
Combining SOC 1, SOC 2, and PCI Audits
by Sarah Harvey / February 28th, 2020
An organization may choose a combined SOC 1, SOC 2, and PCI audit for many reasons. First, there are compliance requirements. A PCI audit…
Internal vs. Third-Party Audits: Why You Need to be Leveraging Both
by Sarah Harvey / February 27th, 2020
Internal Audits vs. External Audits Is an internal audit enough? Should you utilize both internal and external audits? This is an ongoing conversation in…
Combining SOC 2 and HIPAA Audits
by Sarah Harvey / February 26th, 2020
We get a lot of questions about SOC 2 and HIPAA audits. Should your company do both? Are you able to consolidate multiple audits…
10 Ways to Conduct Patch Management
by Sarah Harvey / February 24th, 2020
Like with all software and technology, there are bound to be vulnerabilities found and updates needed to be made. For this reason, organizations must…
