by
Sarah Harvey / October 4, 2023
On May 25, 2018, the GDPR went into effect, putting the world’s attention on data privacy. Since the enforcement deadline has passed, there have been questions about how to comply with the law, who must comply with the law, how the law will be enforced, and so much more. Now a full year later, let’s take a look at developments and predictions for GDPR throughout 2019 and beyond. What is…
by
Sarah Harvey / November 28, 2023
Today’s organizations rely on data to fuel their business processes. Whether it’s the healthcare, financial services, hospitality, federal government, retail, telecommunications, or education industries, there’s sensitive assets that malicious hackers can – and will – steal. With the growing amount of data collected by various organizations and industries, it’s no wonder why creating and enforcing a robust data retention policy is necessary. However, because of the rapidly changing threat landscape…
by
Joseph Kirkpatrick / April 5, 2023
Why is Sampling Used During an Audit? When an organization undergoes an audit, there’s often a large amount of internal controls that an auditor has to review. However, to make this process more efficient, auditors are likely to use sampling whenever the population being tested is uniform and there’s standards that are applied across the board. How Do Auditors Use Sampling? At KirkpatrickPrice, our auditors will sample a size of…
by
Joseph Kirkpatrick / April 5, 2023
How Do Auditors Perform Tests of Controls? In order for an audit firm to be able to provide reasonable assurance and issue an opinion on an organization’s compliance with SOC 1 or SOC 2 audits, they have to test the internal controls that each organization has in place and verify that they are working as intended. To do this, auditors typically perform three types of tests of controls: interviews, reviews,…
by
Sarah Harvey / June 14, 2023
As technology advances, it touches every facet of society – and that includes correctional facilities. There’s an obvious need and investment in physical security at correctional facilities, but cybersecurity is presenting new areas of risk in prisons and detention centers. New technology makes it possible for inmates to send messages, read e-books, download music, participate in video visitation, and receive money transfers. What happens if that technology is compromised by…
