Jerry Hughes

Jerry Hughes

Jerry Hughes, a founding member of Compass IT Compliance, LLC, has over 35 years of experience helping companies become compliant with internal, industry and government regulations such as PCI-DSS, Sarbanes-Oxley, HIPAA, and GLBA. Mr. Hughes, a Certified Information Systems Auditor (CISA), Qualified Security Assessor (QSA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), and Certified Data Privacy Solutions Engineer (CDPSE) has extensive IT auditing experience, especially within the financial industry and the retail sector. He carries an undergraduate degree in Applied Mathematics for Engineers and a minor in Computer Science from the University of Rhode Island. Mr. Hughes has helped develop Compass IT Compliance, LLC into one of the nation's premier consulting firms in the areas of IT governance, assurance, security, and compliance services.

Posts by Jerry Hughes

New AI Executive Order: Why Your Business Can't Wait for Clarity

New AI Executive Order Why Your Business Can't Wait for Clarity

The landscape of artificial intelligence governance in the United States just shifted dramatically. President Trump's recent executive order attempting to establish federal primacy over AI regulation has ignited a national debate about who should be setting the rules for this transfor …

Read Story

The Double-Edged Sword: Why AI Presents Risks Whether You Use It or Not

The Double-Edged Sword Why AI Presents Risks Whether You Use It or Not

The boardroom debate about artificial intelligence has shifted from "should we explore AI?" to a far more complex question: "how do we navigate a landscape where both using AI and avoiding it exposes us to serious risks?"

Read Story

Why Holiday Peak Readiness Depends on Strong SOC 2 Compliance

Black Friday SOC 2 Reports

Black Friday is no longer a single day of crowded stores and doorbuster sales. It has become a long digital stretch that can determine the financial outcome of an entire year for many retailers. For some online merchants, the holiday shopping season represents up to a third of their a …

Read Story

Steps to Prepare Your SOC 2 Compliance Documentation

SOC 2 Documentation

When it comes to vetting critical third-party service providers to work with, organizations need assurance that these companies have appropriate controls in place to securely execute the services they were contracted to perform. This is where the SOC 2 audit comes in. Few certificatio …

Read Story

Your SOC 2 Audit Is Complete – What Comes Next?

SOC 2 Audit Completed

Congratulations on achieving SOC 2 compliance! At Compass, we understand the effort it takes to meet the rigorous Trust Services Criteria and successfully navigate the audit process. Securing your SOC 2 attestation is a significant milestone, demonstrating your organization’s commitme …

Read Story

10 Common Myths About SOC 2 Audits Debunked

SOC 2 Myths

SOC 2 audits play a pivotal role in helping businesses showcase their dedication to safeguarding data and building trust with customers, partners, and stakeholders. However, misconceptions about the process often give rise to confusion, unwarranted stress, and inefficiencies that can …

Read Story

Subscribe by email