Control Deep Dives
- Deep Dive - All-Hands Security TrainingHow to efficiently operationalize this control, and why it’s important
- Deep Dive - AntivirusHow antivirus relates to SOC 2 compliance
- Deep Dive - Board IndependenceLearn about the Board Independence control and related evidence items
- Deep Dive - Configuration StandardsLearn about the Configuration Standards control and what evidence you should provide
- Deep Dive - Consent ControlsLearn about consent-related controls and evidence
- Deep Dive - Cyber InsuranceLearn about cyber insurance and how it differs from general liability insurance
- Deep Dive - Data DictionaryLearn about the Data Dictionary control and associated evidence
- Deep Dive - Data Retention/DeletionImplement the Data Retention/Deletion control and satisfy its linked evidence items
- Deep Dive - Data SegregationData segmentation is a useful tool for improving security, performance, and compliance on a network
- Deep Dive - Deficiency MonitoringLearn about the Deficiency Monitoring control and associated evidence items
- Deep Dive - Disaster RecoveryLearn about the Disaster Recovery control and associated evidence items
- Deep Dive - Encryption in TransitWhat evidence to upload to prove compliance.
- Deep Dive - Job DescriptionsLearn about the Job Descriptions control and associated evidence items
- Deep Dive - Mobile Device ManagementMobile device managers (MDM) are powerful for risk mitigation, but there are controls you can implement if you are not ready for an MDM
- Deep Dive - Role Based AccessLearn about the Role Based Access control and associated evidence items
- Deep Dive - Termination of Access and Access Removal ProceduresAlso referred to as access removal, or offboarding, the termination of access control refers to both logical and physical access
- Deep Dive - User Access ReviewLearn about the User Access Review control and associated evidence items
- Deep Dive - Vendor Due Diligence
- Deep Dive - Asset InventoryDevelop your Asset Inventory control effectively
- Deep Dive - Risk RegisterShow your auditor how mature your security practices are