Which Compliance Assessment is Right for Your Organization? / Part 2

11/25/22 • 39 min

Knowing which compliance assessment will best benefit your organization is just the start. Understanding the intricacies of compliance as a whole is critical in ensuring your find the right partners and people to successfully achieve compliance and leverage them to strengthen your security posture effectively.

In this new episode, Blaise Wabo joins A-LIGN's practice leads for multiple compliance service lines as they continue their conversation on Which Compliance Assessment is Right for Your Organization. Together, they explore the specific dangers and risks of having a "check the box" mentality with their assessment, the importance of treating compliance as a "starting point," and other things to consider when seeking a compliance assessment.

Previous Episode

Which Compliance Assessment is Right for Your Organization? / Part 1

The world of compliance is one of numerous assessments and certifications, each varying in scope and effort depending on the industry they serve and the level of security. Figuring out which one is right for your organization can effectively and efficiently bolster your security posture, improving your competitive edge and offering to your clients. On the flip side, spending time and effort on the wrong one can exhaust an unnecessary amount of resources.

In this new episode, Blaise Wabo joins A-LIGN's practice leads for multiple compliance service lines. They discuss the specifics in each of their areas, such as timelines, prerequisites, and common misconceptions, as well as how to identify what compliance certification will best suit your organization's needs.

Next Episode

Which Compliance Assessment is Right for Your Organization? / Part 3: SOC 2 & ISO 27001

In the latest installment of this four-part series, Blaise Wabo welcomes A-LIGN's SOC 2 lead, Shayna Davitt, and ISO 27001 lead, Adam Lubbert, for a deep dive into SOC and ISO assessments.

They discuss common pitfalls companies face when pursuing both audits and how to avoid them, recent updates in the ISO 27001 standards, and the advantages of doing both SOC 2 and ISO 27001 simultaneously.