1 day ago

SOC2 Code of Conduct Policy

The purpose of this policy is to define expected behavior from employees towards their colleagues, supervisors, and the overall organization. Loading…

1 min read

SOC2 Code of Conduct Policy

The purpose of this policy is to define expected behavior from employees towards their colleagues, supervisors, and the overall organization.

Loading…

1 day ago

Purchase SOC2 Narrative Template Collection

Loading…

1 min read

Purchase SOC2 Narrative Template Collection

Loading…

6 days ago

Building SOC2 Security Program (High Level) Roadmap

This is assuming you are starting from scratch and covering only SOC 2 Security Criteria and not Availability, Confidentiality, Processing Integrity, and Privacy Criterias. This is also assuming that you will go for the SOC2 Type 2 Report in 12–18 Months. The Benefits of SOC2 Establishing a third party opinion…

Compliance

2 min read

Aug 1

Task/Process Procedure Template

Procedures are created and implemented with the sole intention to be read and used by the user community. Always keep the audience in mind when writing procedures. Write the procedure to reflect this level of technology. Every department has its own language. …

Procedures

3 min read

Jul 27

ISO 27001 Statement of Applicability Template

Free template for anyone to use for your ISO 27001 program. ISO 27001 Statement of ApplicabilitySoA Statement of Applicability,Version:,Current as of:ISO/IEC 27001:2013 Annex A controls,Applied?,Control detail,Key driver,Justification for exclusion,Responsibility,Legend,Version ControlSec,Control Objective/Control,Applied?,Date,Version,Created By,Description of Change5,Informatio…Google Docs

Compliance

1 min read

ISO 27001 Statement of Applicability Template

Free template for anyone to use for your ISO 27001 program.

ISO 27001 Statement of ApplicabilitySoA Statement of Applicability,Version:,Current as of:ISO/IEC 27001:2013 Annex A controls,Applied?,Control detail,Key driver,Justification for exclusion,Responsibility,Legend,Version ControlSec,Control Objective/Control,Applied?,Date,Version,Created By,Description of Change5,Informatio…Google Docs

Jul 21

Security Questionnaire — 1177 Questions

All the Security Questionnaires Questions You Will Ever Need Security Questionnaire — 1177 Questions [All the Questions You Will Ever Need]Questions 1177 Questions in this Security Questionnaire,NOTE: Pay Attention to the Categories in Each SectionNOTE: Pay Attention to the Grouping on the Left SideSection,Question Number,Question,Compliance Answer*,Implementation Description (Optional/Recommended),Maturity,Additional Information…Google Docs

Vendor Risk

1 min read

Security Questionnaire — 1177 Questions

All the Security Questionnaires Questions You Will Ever Need

Security Questionnaire — 1177 Questions [All the Questions You Will Ever Need]Questions 1177 Questions in this Security Questionnaire,NOTE: Pay Attention to the Categories in Each SectionNOTE: Pay Attention to the Grouping on the Left SideSection,Question Number,Question,Compliance Answer*,Implementation Description (Optional/Recommended),Maturity,Additional Information…Google Docs

Jul 20

SOC2 Evidence — Population Lists

Sample of possible population lists from an auditor List of all in-scope application code changes related to in-house development applications that have occurred during the review period List of all network related changes to firewall and/or router rule set configurations that have occurred within the in-scope environment during the review…

Soc 2

2 min read

Jul 19

SOC2 Readiness Checklist

[ ] Annual Meetings [ ] Background Check Process [ ] Employee Handbook [ ] Employees Acknowledgement [ ] Documented Charter [ ] Performance Reviews [ ] Organizational Chart [ ] Confidentiality Agreement [ ] Established Defined Roles [ ] Job Descriptions Documented [ ] Job Descriptions Maintained [ ]…

Soc 2

1 min read

Jul 18

Building ISO 27001 Security Program (High Level) Roadmap

This is assuming there isn’t any certifications or audits completed for the organization. 3 Months Create a ISMS Policy and Define ISMS Scope Complete 27001 Gap Analysis Build a Policy Portal Develop new policies required from the 27001 Gap Analysis Develop procedures to enact the policies requirements Research and Select…

Iso 27001

1 min read

Jul 14

SOC 2 Documentation and Evidence Collection Spreadsheet

This Spreadsheet you can use to prepare for a SOC2 Audit. SOC 2 Documentation and Evidence Collection SpreadsheetSOC 2 Documentation and Evidence SOC 2 Documentation and Evidence Classification: ConfidentialREQUIREMENT,DOCUMENT DESCRIPTION,DOCUMENT STATUS,DOCUMENT OWNER,LINK TO DOCUMENT,NOTES,DATE OF IMPLEMENTATION,DATE OF LAST UPDATEOrganizational information,Company history and o…Google Docs [https://docs.google.com/spreadsheets/d/1CAz8ocxc_IPXKZlQ-u_HiVxeqzaE8DWarvqS89aogRA/edit?usp=sharing]

Soc 2

1 min read

SOC 2 Documentation and Evidence Collection Spreadsheet

This Spreadsheet you can use to prepare for a SOC2 Audit. SOC 2 Documentation and Evidence Collection SpreadsheetSOC 2 Documentation and Evidence SOC 2 Documentation and Evidence Classification: ConfidentialREQUIREMENT,DOCUMENT DESCRIPTION,DOCUMENT STATUS,DOCUMENT OWNER,LINK TO DOCUMENT,NOTES,DATE OF IMPLEMENTATION,DATE OF LAST UPDATEOrganizational information,Company history and o…Google Docs [https://docs.google.com/spreadsheets/d/1CAz8ocxc_IPXKZlQ-u_HiVxeqzaE8DWarvqS89aogRA/edit?usp=sharing]