Notes from the Field: CIS Control 5 – Account Management

by Greg Halpin / June 13, 2023

Continuing the series on the Center for Internet Security (CIS) Controls, auditor Greg Halpin will explore the fifth CIS Control about account management and how he sees his clients implementing these requirements in the field.  As a reminder, the CIS controls are 18 information security controls that all organizations and information security professionals should be familiar with and implement to protect their networks from attackers.  The CIS overview for Account…

Ask an Auditor Anything: Recap of a Live Q&A Session  

by Tori Thurmond / March 21, 2024

The truth is that compliance is hard. We know that getting ready for an audit and remaining complainant is a year-round effort that can feel overwhelming.  Our clients often ask us what they can be doing to prepare for their next audit, how to stay on top of the ever-evolving industry, and how to tackle new cybersecurity trends. That’s why we decided to host a live Q&A session with our…

Expert Insight: A Few Quick Tips Regarding Logical Access 

by Lorna Willard / June 7, 2023

Data security is often seen as a burden, not a business-driving tactic. However, in today’s world with the proliferation of IT, the internet, the cloud, and risk associated with these systems and data, properly securing your data is essential to the success of your organization. Logical access is a key factor to data security that could easily be neglected, leaving your organization vulnerable to the growing threats of today’s security…

Prioritize Information Security 

by Tori Thurmond / May 30, 2023

Often times, information security gets neglected in an organization because it's something that’s hard to understand and feels like a hassle to deal with. Other priorities like financial, marketing and operational risk can feel more manageable than trying to understand the details of your organization’s security.   However, if you’ve been following current events, you’ve probably noticed major data breaches and security events are becoming more frequent. Breaches are inevitable…

The Importance of Quality Testing 

by Tori Thurmond / May 30, 2023

What is quality testing and why is it so important during your audit? Many audits on the market test the bare minimum when it comes to compliance requirements for the different audit frameworks. While a regular audit may technically test what needs to be tested to check off a box, a quality audit makes sure that the controls in place are sufficient and consistently functioning the way they need to…