.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
Unlocking Higher Education Security: SOC 2 Compliance & Universities
by Jerry Hughes on January 6, 2025 at 3:27 PM
In an era where data security is paramount, universities find themselves grappling with the dual challenge of advancing academic research and protecting sensitive information. From personal student data to cutting-edge research, universities manage vast amounts of sensitive informatio …
Do SOC 2 Auditors Read and Review Code?
by Bernard Gallagher on December 26, 2024 at 1:04 PM
For organizations pursuing SOC 2 compliance, understanding the scope and focus of the audit process is crucial. A common question that arises is whether auditors review source code as part of the SOC 2 audit. Having clarity on this topic is essential, and organizations can benefit fro …
Why Year-End is the Perfect Time for Your SOC 2 Audit
by Jerry Hughes on December 13, 2024 at 3:06 PM
Conducting SOC 2 audits at year-end has strategic advantages, especially for companies looking to showcase a strong commitment to data security. For organizations, focusing on year-end audits can serve as a powerful differentiator. Here are five compelling reasons why year-end is a pe …
Year-End Audit Crunch: Preparing for SOC 2 When Everyone Else Is
by Jerry Hughes on November 13, 2024 at 4:46 PM
As the calendar edges toward year-end, companies everywhere ramp up their efforts to complete their SOC 2 compliance audits. This time of year often brings a rush to get SOC 2 attestation ready, and for those with ambitious end-of-year goals, timing and preparedness become critical. W …
What Happens if You “Fail” a SOC 2 Examination?
by Jerry Hughes on October 25, 2024 at 9:43 AM
We understand that the SOC 2 audit process is a complex and vital step for businesses looking to demonstrate their commitment to data security, privacy, and trust. But what happens if you “fail” a SOC 2 examination? What does failure even mean in this context?
What Is a SOC 2 Bridge Letter?
by Jerry Hughes on October 22, 2024 at 2:45 PM
In today’s business environment, trust and transparency are components of building lasting relationships with clients and stakeholders. As organizations turn to third-party vendors and service providers, demonstrating compliance with industry standards has never been more crucial. One …