.webp?width=2169&height=526&name=Compass%20regular%20transparent%20website%20(1).webp "Compass IT Compliance Logo")
-1.webp?width=2169&height=620&name=Compass%20regular%20transparent%20website%20smaller%20(1)-1.webp "Compass IT Compliance")
Cyber Incidents - Not if, but When (And When Just Happened)
by Brian Kelly on August 29, 2024 at 11:00 AM
For those of us in information security or cybersecurity, we have long said that it is not a matter of if but a matter of when you will be impacted by a breach or an incident. Over the last several weeks, we have seen when happening more frequently.
How Long Is A SOC 2 Certification Good For?
by William DePalma on August 27, 2024 at 1:00 PM
SOC 2 (System and Organization Controls 2) reports provide service organizations with a way to demonstrate their commitment to security, availability, processing integrity, confidentiality, and privacy. These reports provide assurance to clients and stakeholders that the service organ …
How Often Should a SOC 2 Report Be Updated?
by Jerry Hughes on August 20, 2024 at 1:00 PM
Given the dynamic nature of cybersecurity threats and regulatory requirements, understanding the frequency of SOC 2 report updates is essential for maintaining compliance and ensuring continuous protection. In today's fast-paced landscape, organizations must be proactive in managing t …
What to Do if Your Elderly Parent Is Being Scammed
by Peter Fellini on August 16, 2024 at 10:45 AM
Scams targeting seniors are on the rise, as fraudsters increasingly exploit the vulnerabilities of older adults. Many individuals are now seeking effective ways to protect their elderly parents from these malicious schemes, aiming to safeguard their financial security and well-being. …
Penetration Testing: Black Box vs. White Box vs. Gray Box
by Danielle Corsa on August 13, 2024 at 1:15 PM
Penetration testing, or pen testing, is a critical practice for assessing and fortifying the security of networks, software, and services. Various types of pen testing, including black box, white box, and gray box testing, each offer distinct perspectives and insights. These diverse m …
How Small Businesses Can Mitigate Cyber Risks
by Nicholas Foisy on August 12, 2024 at 10:51 AM
What drives business success today? While there are many answers to this, one common response that applies to every industry is technology. From streamlining operations to enhancing customer engagement, the benefits are undeniable. However, as businesses increasingly rely on digital t …
Understanding SOC 2 Audit Opinions: An Auditor’s Perspective
by Jerry Hughes on August 8, 2024 at 12:45 PM
Service Organization Control 2 (SOC 2) reports are relevant for service organizations to demonstrate their commitment to data security and the effectiveness of their internal controls. SOC 2 reports come with audit opinions provided by independent auditors, which offer insights into h …
What Is a Firewall? Definition & Best Practices
by George Zapata on August 6, 2024 at 1:15 PM
At the forefront of this cybersecurity arsenal stands the firewall—an indispensable component for network security. But what exactly is a firewall, and how does it protect our digital resources? In this blog post, we explore the role of firewalls in information security, discussing th …