Thoughtful Risk Assessments: Empowering Innovation and Security

In general, all SOC 2 reports must cover the trust services criteria relevant to security, so that is a good place to start.

We partnered with SecFix on this article to share the differences between ISO 27001 certification and SOC 2 completion, and how you can leverage your work from one to the other.

We get asked a lot about whether penetration testing is required to complete a SOC 2 report. Our latest article explores this question and more.