The Compass:
More posts

Blog Post
6 min read
Is the auditor’s role in a SOC 2® audit just to find gaps in our system?
During the audit process, we might identify gaps or control exceptions, but our role encompasses much more than that.
READ MORE

Article
Mike DeKock on Building Competitive Advantage
How do the value creation principles of subjective value, entrepreneurship and creativity apply in a highly technical rules-based environment like SOC Compliance audits. These are objective validations of data security measures based on customer-defined criteria similar to traditional financial audits but more specific and subjective.
READ MORE

Article
SOC 2® Reports and Penetration Tests
We get asked a lot about whether penetration testing is required to complete a SOC 2 report. Our latest article explores this question and more.
READ MORE





