Resources

Find out about small steps you can take now to digitally transform your CPA firm.

Read about why it's time to change our outlook and perception of SOC 2 audits.

Find out about the compliance industry's technological shifts and the business advantages of adopting compliance early for startups.

There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.

During the audit process, we might identify gaps or control exceptions, but our role encompasses much more than that. 

We highly recommend you do not use the phrase “SOC 2 Certified." Yes, you see it everywhere, and your competitors are celebrating their certificate - but don’t do it because such a thing does not exist.

Check out Software Secured's story focused on the process of working on their SOC 2 report with MJD Advisors

We partnered with SecFix on this article to share the differences between ISO 27001 certification and SOC 2 completion, and how you can leverage your work from one to the other.

Jemurai shares their ideas and research to present a balanced view on the security implications of using ChatGPT