The Compass:
More posts

Blog Post
7 min read
What controls are required for SOC 2® reports?
There is nuance to this question, and other well-meaning and very smart people that I respect might give a different answer. But within the volumes of literature that set the standards, the true answer is this: There are absolutely no control requirements for SOC 2 reports.
READ MORE

Article
Cyber crises a warning about BCP, say experts
Read about why experts say it's time to figure out and document your backup plan for mission-critical systems.
READ MORE

Article
Leading the Way: How Qualifacts Set the Standard for ISO 42001 AI Management System (AIMS) in Behavioral Health
Qualifacts is the first EHR provider certified to ISO 42001. Learn how we supported them on their journey.
READ MORE





