SOC 2 is a set of security and privacy standards for organizations that provide online services and store sensitive data. The purpose of SOC 2 is to provide assurance to customers and stakeholders that an organization has adequate controls in place to protect sensitive information and maintain the privacy of its customers.
Overview SOC 2 was created by the American Institute of Certified Public Accountants (AICPA), a professional organization for certified public accountants in the United States.
SOC (Service Organization Control) audit reports are used to assess the security and control of a service provider’s system and the services they provide to
Outlined below is a very generic SOC 2 (for Type 1 or Type 2) road-map that can be used as reference point for initial evaluation
This is a sample list of possible security policies that your organization needs to apply. The exact list needs to be determined based on your
Quick overview of the main differences between HIPAA and SOC 2 compliance frameworks.
Get email alerts when we publish new blog articles!
