John Kadechka

In our recent August webinar, “Demystifying SOC 2, HIPAA & HITRUST,” 360 Advanced Practice Director Ryan Winkler and Sr. Compliance Executive Kris Francis, joined by moderator Sr. Compliance Executive Carlos Guerrero, answered several questions posed by guests regarding SOC 2, HIPAA, and HITRUST. Here are the top 5 questions our panel addressed: If you already … Read more

The question of how to better prepare for a SOC 2 assessment comes up frequently for the assessors at 360 Advanced. In our recent webinar, “SOC 2 Overview: A Conversation with Experienced Professionals,” 360 Advanced team members discussed items like how to get prepared for a SOC 2, penetration testing and risk assessments, and leveraging … Read more

Security frameworks like SOC and more specifically, SOC 2 (System and Organization Controls) are becoming increasingly important for companies that process or store client data. SOC 2 reports provide insight to the risk mitigation measures a Service Organization has in place to address the AICPA’s Trust Services Criteria related to Security, Availability, Processing Integrity, Confidentiality … Read more

While workers were shifting to remote work in droves in 2020, cybercriminals were paying attention to the cloud security vulnerabilities that created. In the second quarter of 2020, there was an astonishing 605% increase in cyberattacks that targeted remote workers, according to TechRepublic. With growing numbers of people working remotely and moving to the cloud, … Read more

If a customer (or prospect) has asked you to provide a System and Organizational Controls (SOC) report, you have a valuable opportunity to communicate important information about your risk management and compliance program. In most cases, these organizations are looking for proof that you can protect any confidential information that they entrust you with. If … Read more

A System and Organization Controls (SOC) examination is an independent, third-party assessment of a service organization’s commitment to service and trustworthiness. For any company that intends to outsource a part of its business, such as payroll, record-keeping or IT, it’s a way to vet and gain reasonable assurance that potential service providers are operating under … Read more