Compass IT Compliance Blog

Almost Fooled by a Lululemon “Sale”: A Dad’s Lesson on Online Scams

Lululemon Scam

In the world of cybersecurity, we talk about vigilance and verifying links all day long. As a cybersecurity auditor, I focus on Payment Card Industry Data Security Standards (PCI DSS) and often find myself reminding clients and colleagues about the importance of secure online practice …

Read Story

Cyber Insurance & AI: Are You Fully Covered and Secure?

AI Cyber Liability Insurance

In today’s fast-evolving landscape, generative artificial intelligence (GenAI) is transforming nearly every industry, including insurance. From underwriting and claims processing to customer engagement, AI's integration brings a wealth of new opportunities—as well as complex risks tha …

Read Story

Cybersecurity Acronyms You Need to Know – Glossary

Cybersecurity Glossary

In the world of cybersecurity, keeping up with the latest trends and terminology is essential. Whether you are an industry veteran or just starting to explore the field, understanding the key terms can make a significant difference in grasping the complexities of this ever-evolving la …

Read Story

Essential Elements of an Effective Virtual CISO (vCISO) Program

Effective vCISO Program

In today's digital world, organizations face more cyber threats than ever before. With attacks becoming increasingly complex and frequent, businesses need strong cybersecurity leadership to stay ahead. That's where a Virtual Chief Information Security Officer (vCISO) comes in—a smart …

Read Story

What Happens if You “Fail” a SOC 2 Examination?

SOC 2 Failure

We understand that the SOC 2 audit process is a complex and vital step for businesses looking to demonstrate their commitment to data security, privacy, and trust. But what happens if you “fail” a SOC 2 examination? What does failure even mean in this context?

Read Story

What Is a SOC 2 Bridge Letter?

SOC 2 Bridge Letter

In today’s business environment, trust and transparency are components of building lasting relationships with clients and stakeholders. As organizations turn to third-party vendors and service providers, demonstrating compliance with industry standards has never been more crucial. One …

Read Story

Subscribe by email