Resources

How do the value creation principles of subjective value, entrepreneurship and creativity apply in a highly technical rules-based environment like SOC Compliance audits. These are objective validations of data security measures based on customer-defined criteria similar to traditional financial audits but more specific and subjective.

Throughout history, the prevailing narrative surrounding compliance has been one of necessity, not choice, and audits are approached with a sense of inevitability rather than opportunity.

Putting the right team together can be exciting and challenging. It's something we think about a lot, so we decided to share the superheroes that make up our GRC dream team.

Within the SOC 2 framework, two crucial categories—privacy and confidentiality—play distinct roles in safeguarding sensitive data. Our latest article outlines each category and the differences between the two.

Find out why we don't offer SOC 2 readiness assessments, and how we approach the early phases of a SOC 2 report instead.

Jemurai shares their ideas and research to present a balanced view on the security implications of using ChatGPT

Jemurai talks about the good, bad, and ugly they see around cybersecurity audits.

Echelon Risk + Cyber, in this article, breaks down everything you need to know about the ISO 27001: 2022 updates.