Compass IT Compliance Blog

Season of Giving or Taking? Protect Yourself from Holiday Scams

Holiday Shopping Scams

The holiday season is a time for joy, connection, and generosity. Families gather to celebrate, communities embrace the spirit of giving, and stores offer enticing sales to meet the demands of holiday shoppers. Unfortunately, the same excitement and busyness that make the season speci …

Read Story

The Importance of SOC 1 Reports in 401(k) Audits

SOC 1 Report 401(k)

401(k) plan administrators manage crucial financial transactions, including contributions, distributions, loans, and account reconciliations. Errors or fraud in these activities can have significant financial implications for plan sponsors (employers) and participants (employees). A S …

Read Story

PCI DSS 4.0 Password Requirements: A Guide to Compliance

PCI DSS v4.0 Password Requirements

As cyber threats evolve, ensuring the security of sensitive payment card data has become increasingly crucial for businesses across all industries. The Payment Card Industry Data Security Standard (PCI DSS) was introduced to provide a framework for safeguarding payment card data. The …

Read Story

Cybersecurity vs Computer Science: Which Degree to Choose?

Cybersecurity vs Computer Science Degree

Choosing a degree in Cybersecurity or Computer Science (CS) can be a challenging decision for many students looking to enter the tech industry. Both fields are booming, offering unique skills and career paths, but their curriculums and applications vary significantly. With the rising …

Read Story

Year-End Audit Crunch: Preparing for SOC 2 When Everyone Else Is

SOC 2 End of Year

As the calendar edges toward year-end, companies everywhere ramp up their efforts to complete their SOC 2 compliance audits. This time of year often brings a rush to get SOC 2 attestation ready, and for those with ambitious end-of-year goals, timing and preparedness become critical. W …

Read Story

Almost Fooled by a Lululemon “Sale”: A Dad’s Lesson on Online Scams

Lululemon Scam

In the world of cybersecurity, we talk about vigilance and verifying links all day long. As a cybersecurity auditor, I focus on Payment Card Industry Data Security Standards (PCI DSS) and often find myself reminding clients and colleagues about the importance of secure online practice …

Read Story

Subscribe by email