.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
How Does a Virtual CISO Help with Cybersecurity Risks?
by Tommy Todd on September 19, 2025 at 2:30 PM
In today’s threat landscape, where ransomware, phishing, and data breaches make headlines regularly, companies of all sizes are realizing that cybersecurity can no longer be an afterthought. A Virtual Chief Information Security Officer (vCISO) offers a flexible and scalable way to bui …
What Is AI Voice Spoofing? How to Protect Your Organization
by Louis Trout on September 17, 2025 at 3:17 PM
In today’s digital-first world, cybercriminals are constantly developing new methods to bypass security controls and exploit human trust. Among the most alarming of these threats is AI voice spoofing — a rapidly growing technique that uses artificial intelligence to replicate a person …
Top Ways to Improve IT Security for Small Businesses
by William DePalma on September 12, 2025 at 12:19 PM
Cybersecurity is no longer just a concern for big corporations. Today’s cybercriminals know that small businesses often have fewer defenses, making them prime targets. In fact, reports continue to show that a significant percentage of cyberattacks target small and medium-sized busines …
Red Team Testing: When Your Organization Is Ready (& Why It Matters)
by Patrick Laverty on September 8, 2025 at 2:15 PM
Cybersecurity testing isn’t a one-size-fits-all process. Different organizations are at different maturity levels, and the type of testing you should be investing in depends on how far along you are in building your defenses. One of the most common questions security leaders face is: …
Security Questionnaires: How to Streamline Responses & Save Time
by Alexander Magid on September 2, 2025 at 1:46 PM
As vCISOs serving organizations across the country, we spend a significant amount of time on both sides of the security questionnaire process. We respond to them on behalf of our clients, and we also issue them as part of vendor risk management programs. The reality is the same in eit …
Steps to Prepare Your SOC 2 Compliance Documentation
by Jerry Hughes on August 26, 2025 at 1:42 PM
When it comes to vetting critical third-party service providers to work with, organizations need assurance that these companies have appropriate controls in place to securely execute the services they were contracted to perform. This is where the SOC 2 audit comes in. Few certificatio …