Pages
Posts by category
- Category: Auditing Standards
- SSAE No. 21: New AICPA Engagement for ‘Direct Examination’
- A Guide to Data Center Audits & Reports for a Variety of Industries and Specialized Requirements
- 3 Steps to Creating a Successful Continuous Auditing Process
- Our Commitment to You: How We’re Expanding to Better Serve Our Clients in 2019
- Category: SSAE 18
- Category: SSAE-16
- Category: Company News
- Category: Cybersecurity
- Understanding the EU Cybersecurity Act and Its Effect on Businesses
- Labor Shortage & Other New Threats Emerge Going Towards 2022
- Outsourcing IT Security vs. Hiring an In-House Specialist
- What Is SOC for Cybersecurity?
- Cybersecurity Post-Pandemic: Protecting Health Data from Rising Threats
- Why Your IT Company Needs a Security Audit Partner
- The NIST Cybersecurity Framework: An Introduction to the 5 Functions
- 100% Remote: IT Security Assessments & Compliance Attestations
- IT Security Challenges in Healthcare During the COVID-19 Pandemic
- Top 4 Types of Risk Impacting Manufacturing Companies
- Cybersecurity: Is SOC or SOC 2 Right for Your Needs?
- 12 Commonly Asked Questions About CIS Controls
- The NIST CSF Update: Everything You Need to Know to Get Up to Speed
- Prepare for the Increasingly Expanding Responsibilities of the Chief Risk Officer
- The Most In-Demand Certifications for IT Professionals
- Would My Organization Benefit from the Utilization of a Third-Party Managed Security Service Provider?
- The Top 5 Cybersecurity Challenges Facing Financial Service Institutions
- Security Surprise: Enforcing Regular Password Changes Puts Your Organization at Risk
- COSO’s 2013 Framework- A New Standard for Internal Control
- Category: Cloud Security
- Keep Data Safe with the Right CSP Audit
- Webinar: “Overview of Cloud Basics”
- Coming Soon: A Single Track to EU Cybersecurity Certification in the Cloud
- Pandemic Increases Urgency for Moving to the Cloud
- CSA Cloud Controls Matrix: Why It Is Important When Working With The Cloud
- What is the CLOUD Act and Can It Impact Your Business?
- Category: Cybersecurity Training
- Category: Data Mining
- Category: Data Security
- Ransomware Dominates the Threat Landscape in 2022
- 5 Factors to Consider Increasing Reliance on Big Data
- Why Small Business Security Matters for Your Large Corporation
- Virtual CISOs Are In Hot Demand: Here’s Why
- What You Need to Know about the CMMC
- Protecting Personally Identifiable Information (PII)
- University Network Security Is Now More Important Than Ever
- Do You Do Business in Nevada? Here’s What You Need to Know About Security
- The Massachusetts Data Protection Act: Tightening Up Individual State Data Privacy Laws
- What Is the FTC Red Flags Rule and Who Must Comply?
- Try These 5 Steps to Complete a More In-Depth Threat Assessment
- 6 Tips to Segment a Network to Better Protect Your System
- 5 Key Steps to Developing a Solid Data Retention Policy
- Why Healthcare Security Is A Must
- The Future of Cybersecurity Regulations: March 1, 2017 New York DFS Changes
- The WannaCry Ransomware String of Attacks: What Is the Story?
- As the Mobile World Continues to Grow, So Should Your Data Security Efforts
- Data Security for Your Mobile Device
- Category: Network Security
- A Cybersecurity Checklist to Get You into the Holiday Spirit
- Why Do You Need a Network Security Checklist?
- Guard Your Company’s Computing System from Ransomware
- What are Webtrust and Systrust?
- COBIT & Val IT – How These Frameworks Help Your Business
- How Often Should You Have Your Database Updated?
- Safeguard Company Data: 7 Vital Tips to Increase Password Protection
- The 5 Top Data Breaches of 2015
- How to Respond to a Data Breach
- Preparing for Cybersecurity in 2016
- New Year’s Resolutions for Better Data Security in 2016
- Category: NIST Assessments
- Category: VCISO
- Category: Healthcare Compliance and Risk Mitigation
- How Do Internal Audits Work?
- Implement a Few Simple Tips To Ensure Year-End Compliance
- New Compliance Challenges in 2022
- Identifying Common Compliance Misconceptions
- Offsite Backup and Disaster Recovery for HIPAA Compliance in 2021
- Make Sure Your Team Is Meeting Compliance Controls & Processes
- How Can The COSO Framework Improve Your Organization’s Internal Controls
- 10 Security Essentials Your CIO Needs to Know for Peace of Mind
- IRS-1075 Compliance Tips for Your Organization
- Understanding MARS-E Compliance: Health Insurance Exchanges Security
- SSAE 18 Audits Allow Customers to Trust a Payroll Company’s Services
- Is Joint Commission Accreditation Right for your Healthcare Brand?
- Auditing Exceptions and How They Might Impact Your SOC Reports
- Establish an Effective Internal Control Environment That Reflects Your Organization’s Values
- The Continuing Expansion of the Insurance Compliance Officer Role
- Privacy vs. Confidentiality in a SOC 2: Do You Know the Differences?
- How to Best Communicate Your Security and Compliance Requirements to Potential Business Clients & Partners
- 3 Key Steps for Creating a Unified Control Framework to Simplify Compliance
- 2017 CPA Exam: Changes to Skill and Content Specifications
- Fine Tune Your Compliance By Better Understanding Model Audit Rule Requirements
- Prevent Internal Fraud With Awareness and a Solid Strategy
- Compliance Issues That Your Insurance Company Should Know
- SOC 2 vs. ISO 27001 & 27002: Which is Right for your Company?
- Category: Agreed Upon Procedures
- Category: California Consumer Privacy Act
- Category: Disaster Recovery
- How Internal Auditors Lead Disaster Recovery Planning
- Business Continuity & Disaster Recovery Plans: Why It’s Critical to Update
- Disaster Recovery Terms Glossary
- Everything You Need for Your Next Disaster Recovery Audit
- What a Business Continuity Plan Is and Why You Need One Right Away
- How to Reduce Risk When Working with Healthcare Business Associates
- Category: Enterprise Risk Management
- What Regulations Are on the Horizon for Fintech Companies?
- The Crucial Role of Ethics in IT Security and Compliance
- Risk Management, Risk Assessment or Risk Analysis: What’s the Difference?
- Powerful Tools for Weighing Positive Risk & Negative Risk
- Third-Party Risk Management: The Essential Guide
- Business Leaders Eye Rising Enterprise Risk in 2021
- Green Power Pass (GPP): The Benefits of Renewable Energy Certification
- IT Incident Response Plan: Key Steps to Implement
- Internal Auditor’s Expanding Role in Enterprise Risk Management
- Category: FISMA
- Category: GDPR
- The Only GDPR Compliance Checklist that You Need
- GDPR Three Years Later: What Impact Has It Made?
- Will the U.S. Adopt a Nationwide Data Privacy Law Similar to GDPR?
- Our Takeaways from the Extension to ISO/IEC 27701:2019 – Will ISO 27701 Be the New GDPR Certification Standard?
- Achieve & Maintain Peak GDPR Compliance with These 5 Technology Solutions
- Category: GLBA
- Category: HIPAA/HITECH
- HIPAA Compliance for File Sharing in 2021
- The 4 Most Common Compliance Risks and How to Avoid Them
- Top 5 Most Trusted, HIPAA-Compliant Cloud Storage Services
- Benefits of Combining PCI and HIPAA Compliance Efforts
- HIPAA Compliance & Cell Phones: Staying Compliant While Staying Connected
- HIPAA Compliance Checklist + 3 Sure Ways to Show Adherence
- Do You Know the Difference Between HIPAA Privacy and Security Rules?
- HITRUST® Guidelines for Setting HIPAA-Compliant Passwords
- HIPAA-Compliant Telehealth: Avoiding HIPAA Violations During A Pandemic
- Should HIPAA Audit Logs be Kept for 6 Years?
- What Is the Direct Liability of Business Associates Under HIPAA Rules?
- What Is in a HIPAA Risk Analysis & Tips for How to Pass Your HIPAA Audit?
- The Importance of Disaster Recovery for Healthcare Organizations and HIPAA Compliance
- Which Matters More: HIPAA or State Law?
- What Do We Mean by “Protected Health Information”?
- Category: HITRUST
- HITRUST Implemented, 1-year (i1) Validated Assessment Now Available: Why It’s a Better Option
- What is the role of the External Assessor for HITRUST?
- HITRUST Glossary of Terms within the Phases of HITRUST
- HITRUST: New Assessment Options on the Way
- The Cost of HITRUST® Certification: Why It’s Worth It
- Quiz: Is HITRUST CSF the Right Choice for Your Organization?
- Quickly Evaluate Third-Party Business Partners with HITRUST® Risk Triage
- Preventing Healthcare Data Breaches with the HITRUST CSF®
- Security for Healthcare Organizations in the Cloud with HITRUST® Assurance
- Time to Talk to Your Business Associates About HITRUST CSF Certification?
- Combining HITRUST® and SOC 2 Makes Compliance More Efficient
- How the HITRUST PRISMA Model Delivers ‘Rely-Ability’
- Build a Risk Management Program with the HITRUST CSF®
- HITRUST Maturity is the Strongest Defense Against Data Breaches
- How the HITRUST CSF is Expanding Beyond Healthcare in 2020
- HIPAA vs. HITRUST: What are the Differences?
- What Is the HITRUST CSF? Learn How to Protect Data Security
- How to Get HITRUST Certification in 4 Clear Steps
- What Is a HITRUST® Interim Assessment?
- HITRUST® Scope: Factors to Determine HITRUST Engagement
- How HITRUST Validated and Readiness Assessments Are Scored
- What Does It Mean to Be HITRUST Certified?
- Overview of the HITRUST Quality Assurance Review Process
- Overview of the HITRUST Validated Assessment
- HITRUST CSF Assessment Preparation Guide
- The Power of Gap Analysis & Remediation for HITRUST CSF Certification
- Overview of the HITRUST CSF Readiness Assessment
- Streamline Your SOC Audit Using HITRUST CSF Built-In Control Categories
- The HITRUST RightStart Program: An Accelerated Path to Compliance for Startups
- Benefits of Having a CPA Firm Perform your HITRUST CSF Assessment
- HITRUST Shared Responsibility™ Program: Understanding CSP Security Control Coverage
- What to Know About the New HITRUST CSF v9.3: Effective January 1, 2020
- HITRUST CSF 90-Day Rules: Maturation and Assessment Period Review
- I.S. Partners, LLC Obtains Approval as HITRUST CSF Assessor
- Category: Internal Audit
- What Does an Internal Auditor Do?
- Combining Risk Assessments & Internal Auditing Services
- Certified Information Systems Auditor (CISA): How Are They Qualified?
- Outsourced and Co-sourced Internal Audits: Which One Is Right for Your Organization?
- How Often Are Internal Audits Needed?
- Internal Control: 5 Key Principles of COSO Framework
- Why Organizational Readiness Assessments are Important
- Gap Analysis vs. Internal Audit: Which Evaluation Process Do You Need?
- Learn What Attestation, Assurance and Auditing Means in the CPA Industry
- Benefits of Using a Third Party Service for Medical Claims Audits
- Internal Control Audit of A Cloud Infrastructure
- Category: ISO
- How to Prepare for ISO 27001 Certification in 10 Steps
- Why Is ISO Certification More Popular Among U.S. Businesses?
- Understanding Compliance – ISO 27001 and ISO 27002
- The Advantages of ISO 50001 Certification & Upcoming Changes
- The Difference Between ISO Compliance, Certification & Accreditation in Management Systems
- Understanding Compliance – ISO 27001 and ISO 27002
- A Practical Approach to Asset Inventory for ISO 27001
- Implementing NIST Cyber Security Framework Using ISO 27001 Is an Organic Process
- What You Need to Know about ISO 27001 Changes Between 2013 and 2017
- 6 Steps to Help You Develop Your ISO 27001 Statement of Applicability
- Category: MAR/SOX
- Category: NERC
- Category: PCI-DSS
- Key Differences & Overlaps Between PCI and GDPR
- PCI DSS SAQ Types: Which Type Is Right for Your Business?
- Do You Know Your PCI Compliance Level?
- How to Get Ready for a PCI Audit
- Transition Expected in 2022 with the New PA-DSS Version
- PCI DSS 4.0: What Changes Can We Expect?
- A Guide to Keeping Phone Orders PCI Compliant
- Why Small Businesses Need the Data Security Essentials (DSE) Toolkit
- Don’t Think You Need PCI Compliance Documentation? Think Again!
- How to Keep Employees and Your Organization PCI Compliant
- Is Your Server PCI Compliant?
- Utilizing the effectiveness of PCI DSS and NIST
- Alleviate Audit Anxiety with A Glossary Of PCI Terms
- What is a PCI ROC and Why Do You Need One?
- PCI Non Compliance Fines & Consequences
- An Important Question in Online Payments: Is PayPal PCI DSS Compliant?
- Experts Tips on How to Select a PCI-Compliant Service Provider
- Get Ready for the PCI DSS Version 3.2 Self-Assessment Questionnaires
- The Latest Network Segmentation Guidance and How It Might Affect Your PCI DSS Scope
- PCI Security Standards Council Releases Best Practices for Securing E-Commerce
- Is Your Web Developer or Hosting Company Liable if Your Website is Not PCI Compliant?
- The Web Developers’ Guide to PCI DSS Compliance
- I.S. Partners, LLC Certified as a Qualified Security Assessor to Perform PCI-DSS
- Category: Third-Party Risk Management
- Category: SOC Compliance
- Do You Know How to Read and Interpret a SOC Report?
- Focus on SOC: AT Section 101
- An Overview of Complementary User Entity Controls
- Who Is Certified to Complete a SOC Audit?
- Category: SOC 1
- 5 Reasons Data Centers Need a SOC 1 Audit Report
- The Best SOC 1 Reporting Approach
- Why SOC 1 Is More Valuable than SOC 2?
- The Five Types of Testing Methods Used During Audit Procedures
- How to Find the Right SOC 1 Auditor: a Checklist
- 9 Steps to Prepare for a Smooth SSAE 18 Audit
- Prepare a Great Written Assertion for Your SOC 1 Examination
- Understand the Difference Between SOC 1 Type 1 & 2 Reports
- How To Prepare for a SOC Audit
- How to Write a Strong System Description for SOC 1
- How to Reduce Your E&O Insurance Premium with a SOC Audit
- SSAE 16 Checklist
- Category: SOC 2
- SOC 2 Certification Timeline: 8 Steps to Solid Preparation
- Frequently Asked Questions about the Trust Services Criteria (TSC)
- SOC 1 and SOC 2 Reports – Do You Know The Difference?
- Case Study: Compliance & Security Support for FinTech Startup
- SOC 2 Audits: What They Are & How to Stay Compliant
- What You Need to Know About SOC 2 for Cloud Security
- 4 Critical Practices for SOC 2 Security Compliance
- Are Pen Tests & Vulnerability Scans Needed for SOC 2 Report Compliance?
- What Do SOC 2 Reports Mean to Managed Service Providers?
- Simple Ways to Determine When to Include Processing Integrity into Your SOC 2 Audit
- Category: SOC 3
- Category: SOC for Supply Chain
