Resources

Here’s what we’re thinking about, writing about, and reading about.
We hope you find it helpful.

In the News

SOC 2 Reports Reimagined: From Burden to Business EnablerSOC 2 Reports Reimagined: From Burden to Business Enabler
Read about why it's time to change our outlook and perception of SOC 2 audits.
READ MORE
READ MORE
How Compliance Can Help New Founders Effectively Scale Their BusinessHow Compliance Can Help New Founders Effectively Scale Their Business
Find out about the compliance industry's technological shifts and the business advantages of adopting compliance early for startups.
READ MORE
READ MORE
Cyber crises a warning about BCP, say expertsCyber crises a warning about BCP, say experts
Read about why experts say it's time to figure out and document your backup plan for mission-critical systems.
READ MORE
READ MORE

Written by us

Is the auditor’s role in a SOC 2® audit just to find gaps in our system?Is the auditor’s role in a SOC 2® audit just to find gaps in our system?
During the audit process, we might identify gaps or control exceptions, but our role encompasses much more than that. 
READ MORE
READ MORE
What controls are required for SOC 2® reports?What controls are required for SOC 2® reports?
There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.
READ MORE
READ MORE

Recommended by us

ChatGPT and SecurityChatGPT and Security
Jemurai shares their ideas and research to present a balanced view on the security implications of using ChatGPT
READ MORE
READ MORE
The Truth About AuditsThe Truth About Audits
Jemurai talks about the good, bad, and ugly they see around cybersecurity audits.
READ MORE
READ MORE
ISO/IEC 27001: 2022 - Your Guide to the Updates and How to Get (and Stay) CompliantISO/IEC 27001: 2022 - Your Guide to the Updates and How to Get (and Stay) Compliant
Echelon Risk + Cyber, in this article, breaks down everything you need to know about the ISO 27001: 2022 updates.
READ MORE
READ MORE

If you have questions or content you’d like to see, email us at info@mjd.cpa.
For more information on SOC report types and usage, please visit the American Institute of Certified Public Accountant's (AICPA) website.