Build your IT compliance dream team

Who should participate in your organization's IT compliance efforts?

When embarking on an IT compliance certification journey with Strike Graph, it is important for an organization to identify the key internal team members that will participate in the success of this endeavor. While a CEO may sign the dotted line to engage Strike Graph, it is not unusual for them to toss the compliance hot potato to another team member to oversee completion. In our experience, we’ve found that our most successful customers rely on two or more team members to lead the certification efforts.

• Technology Expert - Without full buy-in from your engineering lead, it will be impossible to go through an IT compliance audit. From completing the SOW for your Pen Test, to providing Data Flow and Network Diagrams, or evidencing User Access Reviews, it is imperative that your product expert be on board for the ride.

• Operations Expert - Whether it’s your COO or People Manager, you’ll want to ensure that your team member(s) responsible for personnel oversight have access to Strike Graph to own Controls and Evidence items such as the Acceptable Use Policy, Employee List, Performance Reviews, or Reference Checks.

• Vendor Expert - A handful of IT compliance controls speak to your organization’s understanding of the risk associated with your mission-critical vendors. This includes reviewing their SOC 2 reports (or other trust assets) on an annual basis - so be sure to loop in the team member(s) with access to your cloud provider’s vendor portal, contract, and/or the vendor’s customer success team.

• Strike Graph - Engaging with Strike Graph ensures that your team has the framework, templates, and easily accessible resources to achieve a SOC 2 report or other IT certification in your desired timeframe.

I’ve assembled my Dream Team - now what?

Reach out to your Strike Graph CSM and let them know you’re ready to get this IT compliance party started! If you haven’t already scheduled an onboarding call, they’ll set you up with an opportunity to review the Strike Graph platform together before launching into your compliance efforts. Make sure all Dream Team participants create user credentials by visiting Strike Graph and completing the “Sign Up” steps linked here so that ownership of control and evidence items may be assigned accordingly. Want to limit the visibility of controls and evidence items for specific team members? Check out our user permissions feature here.

Questions?

Have other questions about who should contribute to IT compliance efforts? Reach out through our chat feature for real-time Customer Success support 8 am - 5 pm PT Monday through Friday.