Resources

Learn how completing thoughtful risk assessments can be a strategic advantage.

For EdTech leaders, it's important to know what's going on in today's compliance landscape and how it can work in your favor.

Mike DeKock talks to Jason Gulya on the EdUp AI podcast focused on building a blueprint for how colleges can leverage artificial intelligence.

There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.

During the audit process, we might identify gaps or control exceptions, but our role encompasses much more than that. 

We highly recommend you do not use the phrase “SOC 2 Certified." Yes, you see it everywhere, and your competitors are celebrating their certificate - but don’t do it because such a thing does not exist.

Penetration testing simulates an outside attack on your applications and network. Drata shares the types of pen tests and how to conduct one to prevent risk.

Software Secured shares exactly how penetration testing increases the ROI of your ISO 27001 compliance.

Echelon Risk + Cyber, in this article, breaks down everything you need to know about the ISO 27001: 2022 updates.