Ohio Takes on Cybersecurity with the CyberOhio Initiative

by Sarah Harvey / June 14, 2023

The threat of a cyberattack is something all businesses must be cognizant of, but unfortunately, many are not. As it has become increasingly challenging to understand and implement cybersecurity best practices, states across the US are beginning to roll out cybersecurity initiatives aimed at helping businesses combat advancing cyber threats. While we’ve touched on the innovative cybersecurity initiatives like the ones that New York has implemented, Ohio is paving the…

SOC 2 Academy: Documentation of Inputs

by Joseph Kirkpatrick / December 16, 2022

Processing Integrity Criteria 1.5 When an organization pursues SOC 2 compliance, an auditor will verify that they comply with the common criteria listed in the 2017 Trust Services Criteria. In addition to the common criteria, though, there’s additional criteria for the availability, confidentiality, processing integrity, and privacy categories. For example, if an organization opts to include the processing integrity category in their audit, they would need to comply with the…

SOC 2 Academy: Complete, Accurate, and Timely Outputs

by Joseph Kirkpatrick / December 16, 2022

Processing Integrity Criteria 1.4 When an organization pursues SOC 2 compliance, an auditor will verify that they comply with the common criteria listed in the 2017 Trust Services Criteria. In addition to the common criteria, though, there’s additional criteria for the availability, confidentiality, processing integrity, and privacy categories. For example, if an organization opts to include the processing integrity category in their audit, they would need to comply with the…

5 Information Security Considerations to Make Your Startup Successful

by Sarah Harvey / June 15, 2023

From Silicon Valley to Times Square, startups of all kinds are popping up all over the United States and beyond. It’s easy for the founders to put all of their resources into starting the business and taking it to market, but what happens when the data that fuels that startup is breached? What happens when an immature information security program causes that startup to fail? What Makes a Startup Successful?…

Web Application Vulnerability Leads to Compromised Data

by Sarah Harvey / December 16, 2022

Georgia Tech Data Breach Last week, Georgia Tech announced a vulnerability in a web application that compromised 1.3 million individuals’ information, spanning from current students to alumni to employees. The vulnerability allowed unauthorized, third party access to a central Georgia Tech database. The university hasn’t released many details yet, but we do know the basics of the incident. The Georgia Tech data breach was found in late March but the…