Resources

How do the value creation principles of subjective value, entrepreneurship and creativity apply in a highly technical rules-based environment like SOC Compliance audits. These are objective validations of data security measures based on customer-defined criteria similar to traditional financial audits but more specific and subjective.

Throughout history, the prevailing narrative surrounding compliance has been one of necessity, not choice, and audits are approached with a sense of inevitability rather than opportunity.

During the audit process, we might identify gaps or control exceptions, but our role encompasses much more than that. 

There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.

Jemurai shares their ideas and research to present a balanced view on the security implications of using ChatGPT

Jemurai talks about the good, bad, and ugly they see around cybersecurity audits.

Echelon Risk + Cyber, in this article, breaks down everything you need to know about the ISO 27001: 2022 updates.