Who Owns the Risk?

by Sarah Harvey / June 15, 2023

We find that managed service providers (MSPs) are often reluctant to take responsibility for the risks that they pose to clients. Their clients, though, may assume an MSP does take hold of a particular risk – and here lies the problem. When this type of miscommunication occurs, it leaves major gaps in organizations’ security posture. So…who owns the risk? Shifting the Risk When an organization engages with one or more…

What is a SOC 1 Audit?

by Joseph Kirkpatrick / April 12, 2023

What is a SOC 1 Audit and Why Do You Need One? Often times, clients might ask you to complete a SOC 1 audit, which might leave you asking, "What is a SOC 1 audit? Why does my organization need one?" If your organization has the ability to impact your customers’ internal controls over financial reporting (ICFR), then you’re likely to be asked by those customers to undergo a SOC…

The Difference Between SOC 1 Type I and SOC 1 Type II

by Joseph Kirkpatrick / April 12, 2023

How Do You Know the Difference Between SOC 1 Type I and SOC 1 Type II? When you begin thinking about pursuing SOC 1 compliance, you’ll have the option of choosing a Type I or Type II audit. While both of these audits assess a service organization’s controls and processes that may impact their clients’ internal control over financial reporting (ICFR), the biggest difference between SOC 1 Type I and…

Secure Your City: Educational Institutions

by Sarah Harvey / June 14, 2023

When you send your child to school, whether it’s a K-12 or higher education institution, you expect them to be safe - but that should go beyond physical security. You should want to know that your child or family member's personal data is secure, too. From names, dates of birth, standardized testing scores, attendance and grade records, medical data, email addresses, phone numbers, Social Security Numbers, and financial aid information,…

Secure Your City: Local Government

by Sarah Harvey / June 14, 2023

Infiltrating technology at local governments is an attack method with big pay-off for hackers. Phish a county employee? You can take the whole county, city, or state down. Because local governments rely on the data they hold to fuel their economies and keep their citizens safe, understanding the need for effective cybersecurity strategies and how to mitigate the numerous cybersecurity challenges cities are faced with needs to be a top…