Security Questionnaires: How to Streamline Responses & Save Time
by Alexander Magid on September 2, 2025 at 1:46 PM
As vCISOs serving organizations across the country, we spend a significant amount of time on both sides of the security questionnaire process. We respond to them on behalf of our clients, and we also issue them as part of vendor risk management programs. The reality is the same in eit …
Your SOC 2 Audit Is Complete – What Comes Next?
by Jerry Hughes on May 28, 2025 at 4:03 PM
Congratulations on achieving SOC 2 compliance! At Compass, we understand the effort it takes to meet the rigorous Trust Services Criteria and successfully navigate the audit process. Securing your SOC 2 attestation is a significant milestone, demonstrating your organization’s commitme …
Understanding SOC 2 Compliance & Vendor Management
by William DePalma on January 24, 2025 at 11:59 AM
SOC 2 (System and Organization Controls 2) is a trusted auditing standard developed by the American Institute of Certified Public Accountants (AICPA). It assesses an organization’s information systems against the Trust Services Criteria (TSC): security, availability, processing integr …
Should You Outsource Your IT Department?
by Nicholas Foisy on December 31, 2024 at 3:10 PM
In today’s rapidly evolving technological landscape, businesses face increasing pressure to stay ahead of the curve while managing costs, ensuring security, and meeting customer expectations. One of the key decisions organizations must make is whether to maintain an in-house IT depart …
What Is a SOC 1 Audit? A Guide to the Report
by Jerry Hughes on December 5, 2024 at 4:18 PM
When it comes to demonstrating trust and reliability to clients, few tools are as powerful as a SOC 1 report. These reports play a pivotal role in showcasing an organization’s commitment to safeguarding financial data and maintaining robust internal controls.
What Platforms Are SOC 2 Compliant? Find Out Here!
by Nicholas Foisy on September 13, 2024 at 1:20 PM
SOC 2 compliance has become a critical benchmark for organizations handling sensitive customer data. For businesses looking to maintain trust and meet industry standards, SOC 2 compliance is often a non-negotiable requirement. The following article provides a breakdown of whether vari …