.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
10 Common Myths About SOC 2 Audits Debunked
by Jerry Hughes on May 28, 2025 at 4:01 PM
SOC 2 audits play a pivotal role in helping businesses showcase their dedication to safeguarding data and building trust with customers, partners, and stakeholders. However, misconceptions about the process often give rise to confusion, unwarranted stress, and inefficiencies that can …
SOC 2 & Managed Security Services: A Perfect Partnership for SMBs
by Bernard Gallagher on April 25, 2025 at 10:30 AM
For small and medium-sized businesses (SMBs), navigating the complexities of cybersecurity and compliance can feel overwhelming. Limited resources, time constraints, and the ever-present threat of cyberattacks make it challenging to establish robust security measures while meeting ind …
Selecting Your SOC 2 Type 2 Observation Period
by Bernard Gallagher on April 11, 2025 at 10:30 AM
Preparing for your first SOC 2 Type 2 audit—or planning your next—requires careful selection of a critical component: the observation period. This timeframe, also known as the monitoring period, audit period, or review window, defines when your organization's controls will be evaluate …
How Long Does a SOC 2 Audit Take to Complete?
by Bernard Gallagher on April 4, 2025 at 9:44 AM
At Compass, we frequently get asked, “How long does a SOC 2 audit take?” The answer depends on several factors—but having a clear understanding of the typical phases, timelines, and what influences the duration can help your organization prepare and plan accordingly.
Top Security Tools to Simplify Your SOC 2 Compliance Journey
by Bernard Gallagher on March 13, 2025 at 3:52 PM
Navigating the complexities of SOC 2 compliance can be a daunting task for businesses, especially when they need to establish secure, reliable, and repeatable processes. A comprehensive SOC 2 audit focuses on five key Trust Service Criteria: security, availability, processing integrit …
SOC 2 for Healthcare: A Compliment to HIPAA Compliance
by Bernard Gallagher on March 8, 2025 at 1:00 PM
In today’s digital healthcare landscape, protecting sensitive patient data is a top priority. Healthcare providers are tasked with safeguarding information in compliance with rigorous regulations such as the Health Insurance Portability and Accountability Act (HIPAA). However, achievi …