Artwork

CSTMR에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 CSTMR 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.
Player FM -팟 캐스트 앱
Player FM 앱으로 오프라인으로 전환하세요!

Interview with Alex Bates of Dark Rock Cybersecurity: Using SOC 2 to Enhance Your Business, Not Just Manage Risk

39:25
 
공유
 

Manage episode 505316580 series 3575809
CSTMR에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 CSTMR 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

Host - Rory Holland - cstmr.com - Linkedin: CSTMR

Interviewed - Jack Macy, CSTMR and Alex Bates, Dark Rock Cybersecurity - LinkedIn: CSTMR and Dark Rock Cybersecurity

Want to be a part of the podcast? Contact Rory today!

In This Episode

Join us for Episode 29 of Mighty Finsights, where Rory Holland interviews Jack Macy, founder and COO of CSTMR, and Alex Bates with Dark Rock Cybersecurity about the journey CSTMR took to achieve SOC 2 compliance. They explore the importance of SOC 2 for building trust with clients, the challenges faced during the process, and the benefits of being a certified vendor in the financial services industry. The conversation also covers the selection of the right SOC 2 partner and offers advice for organizations considering pursuing SOC 2 compliance, including why it’s helpful to have an expert coach to guide you through the process.

Key Takeaways

  • SOC 2 compliance is an excellent way to improve organizational health and build client trust.
  • CSTMR's proactive approach to SOC 2 is unusual for service-based business, especially agencies.
  • The SOC 2 process helps formalize risk management practices and “harden” security protocols.
  • Data breaches incur significant costs and reputational harm for organizations.
  • Selecting the right SOC 2 partner will make a big difference in your experience and the quality of your results.
  • Investing in compliance should be viewed as a long-term strategy.
  • Training and educating the organization as a whole is key to successful implementation.
  • SOC 2 is a report of compliance, not a “certification.”

Chapters

00:00 Episode Introduction

01:58 Why Did CSTMR Pursue SOC 2?

03:58 The Importance of SOC 2 for Professional Services

06:09 Challenges in Achieving SOC 2 Compliance

09:52 Real-World Security Failures

12:57 The Direct Impact on a Brand

14:27 The Prevalence of SOC 2 in the Marketing Space

16:56 Benefits to CSTMR's Clientele

19:48 Selecting the Right SOC 2 Partner

22:21 What to Look for in a SOC 2 Vendor

24:13 How Playing Competitive Sports Informs Alex's Work

29:20 How to Know If SOC 2 Is Right for Your Organization

30:28 How CSTMR Tackled the Challenges of Passing SOC 2

34:07 Unpacking the Gap Analysis

35:44 Trust Service Criteria

  continue reading

35 에피소드

Artwork
icon공유
 
Manage episode 505316580 series 3575809
CSTMR에서 제공하는 콘텐츠입니다. 에피소드, 그래픽, 팟캐스트 설명을 포함한 모든 팟캐스트 콘텐츠는 CSTMR 또는 해당 팟캐스트 플랫폼 파트너가 직접 업로드하고 제공합니다. 누군가가 귀하의 허락 없이 귀하의 저작물을 사용하고 있다고 생각되는 경우 여기에 설명된 절차를 따르실 수 있습니다 https://ko.player.fm/legal.

Host - Rory Holland - cstmr.com - Linkedin: CSTMR

Interviewed - Jack Macy, CSTMR and Alex Bates, Dark Rock Cybersecurity - LinkedIn: CSTMR and Dark Rock Cybersecurity

Want to be a part of the podcast? Contact Rory today!

In This Episode

Join us for Episode 29 of Mighty Finsights, where Rory Holland interviews Jack Macy, founder and COO of CSTMR, and Alex Bates with Dark Rock Cybersecurity about the journey CSTMR took to achieve SOC 2 compliance. They explore the importance of SOC 2 for building trust with clients, the challenges faced during the process, and the benefits of being a certified vendor in the financial services industry. The conversation also covers the selection of the right SOC 2 partner and offers advice for organizations considering pursuing SOC 2 compliance, including why it’s helpful to have an expert coach to guide you through the process.

Key Takeaways

  • SOC 2 compliance is an excellent way to improve organizational health and build client trust.
  • CSTMR's proactive approach to SOC 2 is unusual for service-based business, especially agencies.
  • The SOC 2 process helps formalize risk management practices and “harden” security protocols.
  • Data breaches incur significant costs and reputational harm for organizations.
  • Selecting the right SOC 2 partner will make a big difference in your experience and the quality of your results.
  • Investing in compliance should be viewed as a long-term strategy.
  • Training and educating the organization as a whole is key to successful implementation.
  • SOC 2 is a report of compliance, not a “certification.”

Chapters

00:00 Episode Introduction

01:58 Why Did CSTMR Pursue SOC 2?

03:58 The Importance of SOC 2 for Professional Services

06:09 Challenges in Achieving SOC 2 Compliance

09:52 Real-World Security Failures

12:57 The Direct Impact on a Brand

14:27 The Prevalence of SOC 2 in the Marketing Space

16:56 Benefits to CSTMR's Clientele

19:48 Selecting the Right SOC 2 Partner

22:21 What to Look for in a SOC 2 Vendor

24:13 How Playing Competitive Sports Informs Alex's Work

29:20 How to Know If SOC 2 Is Right for Your Organization

30:28 How CSTMR Tackled the Challenges of Passing SOC 2

34:07 Unpacking the Gap Analysis

35:44 Trust Service Criteria

  continue reading

35 에피소드

모든 에피소드

×
 
Loading …

플레이어 FM에 오신것을 환영합니다!

플레이어 FM은 웹에서 고품질 팟캐스트를 검색하여 지금 바로 즐길 수 있도록 합니다. 최고의 팟캐스트 앱이며 Android, iPhone 및 웹에서도 작동합니다. 장치 간 구독 동기화를 위해 가입하세요.

 

빠른 참조 가이드

탐색하는 동안 이 프로그램을 들어보세요.
재생