Rachel Hughes

Rachel Hughes

Rachel Hughes is a Cybersecurity Analyst with the Compass Assurance Team, bringing several years of experience in IT auditing and SOC report preparation. She holds the IBM AI Fundamentals badge and the Certified Information Systems Auditor (CISA) certification. Rachel is currently pursuing additional undergraduate coursework in accounting through Southern New Hampshire University. She recently earned her Bachelor’s degree in Business Information Systems from Eastern Connecticut State University, where she consistently made the Dean’s List and was inducted into both the Delta Mu Delta and Upsilon Pi Epsilon honor societies.

Posts by Rachel Hughes

Your SOC 2 Remediation Roadmap: Turning Exceptions into Progress

by Rachel Hughes on January 30, 2026 at 11:52 AM

Your SOC 2 Remediation Roadmap Turning Exceptions into Progress

Your SOC 2 audit report just landed on your desk, and you've spotted exceptions. Before the panic sets in, take a breath. Finding exceptions in your SOC 2 audit doesn't signal impending disaster or business failure. In fact, exceptions happen even to well-managed, security-conscious o …

Read Story

Topics: Compliance SOC 2

Rethinking SOC 2 Audits with Purpose-Built Platforms

by Rachel Hughes on July 21, 2025 at 2:38 PM

SOC 2 Audit Software

SOC 2 audits are a crucial part of demonstrating an organization’s commitment to data security and trust. They provide assurance to customers, partners, and regulators that your systems are appropriately controlled and monitored. But despite their value, SOC 2 audits are often viewed …

Read Story

Topics: Compliance SOC 2

What Are the Key Steps in Preparing for a SOC 2 Readiness Assessment?

by Rachel Hughes on July 15, 2025 at 10:51 AM

Preparing for SOC 2 Readiness

Achieving SOC 2 compliance is a major milestone for organizations that handle sensitive customer data—especially in the SaaS, IT services, and cloud-hosting spaces. At first glance, preparing for a readiness assessment might seem redundant. After all, it’s meant to be the step that he …

Read Story

Topics: Compliance SOC 2

A Detailed History of SOC 2 Compliance

by Rachel Hughes on July 2, 2024 at 12:30 PM

History of SOC 2

Security threats do not only come from bad actors online or suspicious links in an email. Have you considered the security threats posed by your organization’s closest entities – like vendors and partners? Third party service providers may unknowingly pose security threats to their co …

Read Story

Topics: Vendor Management Compliance SOC 2

See all

See all

Subscribe by email