Everything you know about audits and compliance is changing

There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.

Are you looking to better understand scope periods and how to decide on yours? Our latest blog outlines some things to consider.

Jemurai talks about the good, bad, and ugly they see around cybersecurity audits.