Reciprocity

Making Sense of HiTrust Certification

Proper handling, management, and storage of protected health information (PHI) and electronic protected health information (ePHI) are critical in the healthcare industry.The federal government and different regulatory bodies have dozens of guidelines on the handling and storage of patient health information. Failure to adhere to the requirements has various consequences, including substantial fines and even […]

Making Sense of HiTrust Certification Read More »

Scoping a SOC2 Audit

Leave a Comment / Try This / Simon

In decades gone by, for service companies, conducting a Service Organization Control (SOC) 2 audit was considered more of a rite of passage that separated the biggest players in the market from the “others” category.“Wow, we have grown so prosperous that big and important clients now require that we do important things. We now need

Scoping a SOC2 Audit Read More »

audit Availability compliance confidentiality cybersecurity internal controls privacy Processing integrity readiness assessments Reciprocity Security Service Organization Control Trust Services Principles

KPIs for Measuring Compliance Effectiveness

Leave a Comment / Money, Try This / Simon

Key performance indicators (KPIs) were easier to measure in 1996 than they are today. All you needed is someone to review documents and award a score in a very short time. It was similar to telling the performance of a student just by looking at his grades.Today, the process has evolved with sophistication of information

KPIs for Measuring Compliance Effectiveness Read More »

Business Objectives compliance cybersecurity data protection data security Governance information assets information security Ken Lynch Metrics performance indicators Reciprocity Risk risk assessment risk management SaaS software