SOC Reporting Guide - SOC 1

SOC Reporting Guide - SOC 1 | SOC 2 https://validator.w3.org/feed/docs/rss2.html SOC 1 (SSAE 18) Data Center and Hosting What is SSAE 18 (formerly SSAE 16)? Are Third Party Vendor reviews required for SOC 1 and SOC 2? Frequently Asked Questions Thank You Thank You Download the SSAE 18 / SOC Reporting Guide Download The SOC Reporting Guide HIPAA Compliance – SOC 2 Vulnerability Assessments and Penetration Testing – Common Issues Found Understanding SaaS Compliance – SSAE 18 / SOC 1 / SOC 2 Can an organization opt for both SOC2 and ISO 27001? SOC 1 & SOC 2 Preparation Checklist SOC Reporting Guide – SOC 1 | SOC 2 | SOC 3 How often is a SOC 2 audit required? Marketing & Advertising for Service Providers w/ SOC Report SOC 2 Report – Audit / Compliance Hub Controls at a Service Organization: Policy and Evidence SOC Preparation: Make Control Descriptions Match the Process AI application security testing: scope, permissions and reassessment Kubernetes security assessments: what a container scan leaves out Internal and external network testing: two different questions Web application and API penetration testing: defining the right scope Automated testing, manual penetration testing and red teaming: what is acceptable? Cloud security testing: scope, identity and shared responsibility Vulnerability Assessment and Penetration Testing What should we reassess before enabling AI in an existing product? How to review a vendor penetration-test report How can we spot AI being added to a product we already use? What should happen after we approve a vendor? How much review does a low-risk vendor need? What work should a third-party risk tool help us do? What should we track if we manage third-party risk manually? Can different vendors still leave us dependent on the same provider? When Do Third-Party Risk Tools Actually Help? Can We Manage Third-Party Risk Without Dedicated Software? Do we need a list of every supplier our vendor uses? What Should We Ask a Vendor About Its Fourth-Party Dependencies? Which Vendors Need the Most Oversight? Should we ask vendors how they manage their own third parties? What is fourth-party risk? Third-party Risk What Does Third-Party Risk Management Cover Beyond Reviewing a Vendor? Audit automation: evidence, ownership and review SOC 1 & SOC 2 Preparation Checklist The SSAE 16 Auditing Standard: Historical Overview SSAE 18 and SOC 1: What Changed From SSAE 16? Why Get a SOC Report? Customer Assurance and Business Value SOC 2 User Access Reviews: Decisions, Corrections and Evidence SSAE 16 and the Federal HealthCare Exchange: Historical Commentary