Glossary of Compliance

Compliance Glossary

Our list of curated compliance glossary offers everything you to know about compliance in one place.

Glossary » SOC 2 » SOC 2 Type 2 Report

SOC 2 Type 2 Report

A SOC 2 Type 2 report is an assessment of an organization’s controls over a period of time, typically six months to a year. It provides information on the design and operating effectiveness of the controls in place to protect the security, privacy, and confidentiality of sensitive customer data.

The report would also include information on the organization’s system development and maintenance processes and the controls in place to ensure the security of the company’s systems and infrastructure. The report would be based on an in-depth review of the organization’s systems and controls and a review of the organization’s policies and procedures over a specified period of time.

Additional reading

Blogs SOC 2

What is SOC 2 Certification? A Beginners Guide to Compliance

You are here because somewhere in your business improvement plan because your business prospects specifically asked you for your SOC 2 certification. For a cloud hosted company processing sensitive customer data, this is not uncommon and a major sales unblocker. But in order to be certified, you should understand the nitty gritties of the process. …

Healthcare Cyber Security [How to Implement + Best Practices Checklist]

In October 2021, a Japanese hospital was forced to shut down operations for months. Malicious actors encrypted medical data of 85,000 patients and threatened to leak it unless ransom was paid. This is not an isolated incident – businesses depend on the cloud to accelerate workflow but don’t secure it unless an incident occurs. Cybercriminals…

Blogs PCI DSS

What is PCI DSS Network Segmentation? (Quick Guide)

With cybersecurity threats becoming ubiquitous, network segmentation makes for an effective way for cloud-hosted companies that processes payment card data to secure access to sensitive cardholders’ data. While the Payment Card Industry Data Security Standard (PCI DSS) doesn’t mandate it, network segmentation allows organizations to prioritize and focus their security efforts by segmenting and isolating…