Resources

AI is unchartered territory for many companies; however, the more it evolves, the more it becomes clear that AI adds critical business value when used responsibly.

The word "compliance" might make startup founders shudder as they think of onerous, time-consuming processes, but it doesn't have to be that way.

A CEO on a mission to guide companies through the ever-changing world of technology.

We get asked a lot about whether penetration testing is required to complete a SOC 2 report. Our latest article explores this question and more.

There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.

During the audit process, we might identify gaps or control exceptions, but our role encompasses much more than that. 

Penetration testing simulates an outside attack on your applications and network. Drata shares the types of pen tests and how to conduct one to prevent risk.

Software Secured shares exactly how penetration testing increases the ROI of your ISO 27001 compliance.

Echelon Risk + Cyber, in this article, breaks down everything you need to know about the ISO 27001: 2022 updates.