Compass IT Compliance Blog / Vendor Management

Lessons Learned from the CrowdStrike Tech Outage

CrowdStrike Building

The recent global outage caused by CrowdStrike's faulty update has highlighted crucial lessons for organizations worldwide. By examining the factors that led to this disruption and understanding how to mitigate similar risks, organizations can enhance their resilience and ensure conti …

Read Story

Nobody Is Exempt from Vendor Security Questionnaires

Vendor Management

Increased supply chain and vendor breaches have underscored the critical importance of vendor security questionnaires for safeguarding organizational security. These questionnaires have emerged as essential tools for organizations to evaluate the security practices of their third-part …

Read Story

What Are the 5 Trust Services Criteria (TSC) for SOC 2?

SOC 2 TSC

Adhering to industry standards is crucial for organizations that manage sensitive data and rely on robust information systems. The SOC 2 Trust Services Criteria (TSC) provides a comprehensive framework to ensure systems are secure, available, and reliable. This blog will explore the f …

Read Story

A Detailed History of SOC 2 Compliance

History of SOC 2

Security threats do not only come from bad actors online or suspicious links in an email. Have you considered the security threats posed by your organization’s closest entities – like vendors and partners? Third party service providers may unknowingly pose security threats to their co …

Read Story

CDK Global Hit by Cyberattacks: The Impact on Auto Dealerships

Car Dealership

CDK Global, a major software-as-a-service (SaaS) provider for car dealerships, recently faced consecutive cyberattacks, severely disrupting the automotive sales and service industry. These breaches highlight the increasing sophistication of cyber threats and the widespread implication …

Read Story

Cl0p’s MOVEit Attack Victim Count Continues to Climb

Cl0p MOVEit Attack

The cyber threat landscape continues to evolve at an alarming pace, posing ever-increasing challenges to businesses, governments, and individuals. A particularly troubling development in recent months has been the dramatic rise in MOVEit attacks attributed to the Cl0p ransomware group …

Read Story

Subscribe by email