Jerry Hughes

Jerry Hughes

Jerry Hughes, a founding member of Compass IT Compliance, LLC, has over 35 years of experience helping companies become compliant with internal, industry and government regulations such as PCI-DSS, Sarbanes-Oxley, HIPAA, and GLBA. Mr. Hughes, a Certified Information Systems Auditor (CISA), Qualified Security Assessor (QSA), Certified in Risk and Information Systems Control (CRISC), Certified Information Security Manager (CISM), and Certified Data Privacy Solutions Engineer (CDPSE) has extensive IT auditing experience, especially within the financial industry and the retail sector. He carries an undergraduate degree in Applied Mathematics for Engineers and a minor in Computer Science from the University of Rhode Island. Mr. Hughes has helped develop Compass IT Compliance, LLC into one of the nation's premier consulting firms in the areas of IT governance, assurance, security, and compliance services.

Posts by Jerry Hughes

Unlocking Higher Education Security: SOC 2 Compliance & Universities

by Jerry Hughes on January 6, 2025 at 3:27 PM

SOC 2 Higher Education

In an era where data security is paramount, universities find themselves grappling with the dual challenge of advancing academic research and protecting sensitive information. From personal student data to cutting-edge research, universities manage vast amounts of sensitive informatio …

Read Story

Topics: SOC 2 Higher Education

NIST AI Risk Management Framework Explained

by Jerry Hughes on December 20, 2024 at 11:00 AM

NIST AI RMF

Artificial intelligence (AI) is transforming industries, but with its rapid adoption come risks that organizations must address to ensure safe and ethical use. The NIST Artificial Intelligence Risk Management Framework (AI RMF), developed by the National Institute of Standards and Tec …

Read Story

Topics: Compliance NIST Artificial Intelligence

Why Year-End is the Perfect Time for Your SOC 2 Audit

by Jerry Hughes on December 13, 2024 at 3:06 PM

SOC 2 Audit New Year's

Conducting SOC 2 audits at year-end has strategic advantages, especially for companies looking to showcase a strong commitment to data security. For organizations, focusing on year-end audits can serve as a powerful differentiator. Here are five compelling reasons why year-end is a pe …

Read Story

Topics: SOC 2

What Is a SOC 1 Audit? A Guide to the Report

by Jerry Hughes on December 5, 2024 at 4:18 PM

SOC 1 Reports

When it comes to demonstrating trust and reliability to clients, few tools are as powerful as a SOC 1 report. These reports play a pivotal role in showcasing an organization’s commitment to safeguarding financial data and maintaining robust internal controls.

Read Story

Topics: Vendor Management Compliance SOC 1

The Importance of SOC 1 Reports in 401(k) Audits

by Jerry Hughes on November 22, 2024 at 12:00 PM

SOC 1 Report 401(k)

401(k) plan administrators manage crucial financial transactions, including contributions, distributions, loans, and account reconciliations. Errors or fraud in these activities can have significant financial implications for plan sponsors (employers) and participants (employees). A S …

Read Story

Topics: Compliance Finance SOC 1

Year-End Audit Crunch: Preparing for SOC 2 When Everyone Else Is

by Jerry Hughes on November 13, 2024 at 4:46 PM

SOC 2 End of Year

As the calendar edges toward year-end, companies everywhere ramp up their efforts to complete their SOC 2 compliance audits. This time of year often brings a rush to get SOC 2 attestation ready, and for those with ambitious end-of-year goals, timing and preparedness become critical. W …

Read Story

Topics: Compliance SOC 2
1 2 3 4 5

See all

See all

Subscribe by email