Resources

Here’s what we’re thinking about, writing about, and reading about.
We hope you find it helpful.

Article

SOC 2 Reports Reimagined: From Burden to Business Enabler SOC 2 Reports Reimagined: From Burden to Business Enabler

Written by

Mike DeKock, Founder and CEO at MJD Advisors

Sep 3, 2024

In the News

Article

Mike DeKock on Building Competitive Advantage Mike DeKock on Building Competitive Advantage

How do the value creation principles of subjective value, entrepreneurship and creativity apply in a highly technical rules-based environment like SOC Compliance audits. These are objective validations of data security measures based on customer-defined criteria similar to traditional financial audits but more specific and subjective.

Article

Everything you know about audits and compliance is changing Everything you know about audits and compliance is changing

Throughout history, the prevailing narrative surrounding compliance has been one of necessity, not choice, and audits are approached with a sense of inevitability rather than opportunity.

Written by us

Blog Post

Why do SOC reports have to be issued by a CPA firm?Why do SOC reports have to be issued by a CPA firm?

Find out why a CPA firm must issue your SOC report and why that's actually a good thing.

Blog Post

What should the scope period be for my SOC 2® Type 2 report?What should the scope period be for my SOC 2® Type 2 report?

Are you looking to better understand scope periods and how to decide on yours? Our latest blog outlines some things to consider.

Blog Post

How do I choose a SOC auditor?How do I choose a SOC auditor?

Interviewing auditors is a necessary step in the process as you begin your SOC exam. Here we outline some questions and considerations to help you along the way.

Recommended by us

Article

Unlocking Trust: How SOC 2 Validated Our Security Program Unlocking Trust: How SOC 2 Validated Our Security Program

Check out Software Secured's story focused on the process of working on their SOC 2 report with MJD Advisors

Article

Managing the move from ISO 27001 certification to SOC 2 completion Managing the move from ISO 27001 certification to SOC 2 completion

We partnered with SecFix on this article to share the differences between ISO 27001 certification and SOC 2 completion, and how you can leverage your work from one to the other.

Article

Penetration Testing: Why It’s Important + Common Types Penetration Testing: Why It’s Important + Common Types

Penetration testing simulates an outside attack on your applications and network. Drata shares the types of pen tests and how to conduct one to prevent risk.

If you have questions or content you’d like to see, email us at info@mjd.cpa.
For more information on SOC report types and usage, please visit the American Institute of Certified Public Accountant's (AICPA) website.