Security Compliance Blog

In-depth analysis & guidance on SOC 2®, CMMC Readiness, PCI DSS, GRC tools, and more.

NIST CSF

Breaking Down the Major Changes in NIST CSF 2.0

April 30, 2026

SOC 1®

Why SaaS Companies Need a SOC 1® Report

April 29, 2026

SOC 1®

Why Payroll Processors Need a SOC 1® Report

April 27, 2026

SOC 1®

Why Organizations Must Prioritize Robust SOC 1® Controls

April 25, 2026

SOC 1®

Why Managed IT Service Providers Need a SOC 1® Report

April 23, 2026

SOC 1®

Why Human Resources Outsourcing Firms Need a SOC 1® Report

April 21, 2026

SOC 1®

Why Data Centers and Hosting Providers Need a SOC 1® Report

April 19, 2026

SOC 1®

Why Banks and Other Financial Institutions Need a SOC 1®* Report

April 17, 2026

SOC 1®

Why are SOC 1® Assessments Beneficial for Hospitals and Healthcare Organizations

April 15, 2026

CMMC

Understanding CMMC Mock Assessments

April 14, 2026

SOC 1®

Why a SOC 1® Assessment Matters for Your Organization

April 13, 2026

SOC 1®

What Are the Benefits of a SOC* Bridge Letter

April 10, 2026

SOC 1®

What is a SOC* Bridge Letter

April 8, 2026

HIPAA

The Importance of Security Reporting for SaaS Companies

April 6, 2026

HIPAA

The GRC Tool Reality Check: Is It Working for You or Your Assessor?

April 4, 2026

ISO 27001

The Integrity Gap: Moving Beyond Compliance Theater Part 3

April 3, 2026

ISO 27001

The Integrity Gap: Moving Beyond Compliance Theater Part 2

April 3, 2026

ISO 27001

The Integrity Gap: Moving Beyond Compliance Theater Part 1

April 3, 2026

SOC 1®

The Benefits of a 12 Month SOC* Assessment

April 2, 2026

HIPAA

Simplify Compliance One Engagement, Multiple Reports with Auditwerx

March 31, 2026

SOC 1®

Common Challenges During the Implementation of SOC 1® Controls

March 30, 2026

CMMC

Mapp ISO 27001 to CMMC: Shortcut for Defense Contractors

March 11, 2026

ISO 27001

Understanding ISO 27001:2022

March 6, 2026

ISO 27001

How to Conduct a Risk Assessment for ISO 27001 Compliance

March 6, 2026

ISO 27001

Building a Culture of Security: The Auditwerx Approach to ISMS

March 5, 2026

ISO 27001

5 Common Pitfalls That Stall ISO 27001 Certification

March 5, 2026

ISO 27001

Navigating the ISO 27001 Statement of Applicability (SoA)

March 4, 2026

ISO 27001

Why ISO 27001 is the Secret Weapon for SaaS Sales Cycles

March 4, 2026

ISO 27001

Navigating the ISO 27001 and PCI DSS Overlap

March 3, 2026

ISO 27001

The 10 Documents Required for ISO 27001 Certification

March 3, 2026

ISO 27001

What to Expect During an ISO 27001 Stage 1 Readiness Review

March 2, 2026

ISO 27001

The ROI of Combining ISO 27001 and SOC 2®

March 2, 2026

CMMC

Managing the CMMC POA&M and Closeout Process

January 28, 2026

CMMC

Who Provides Comprehensive CMMC Readiness Assessments?

January 26, 2026

CMMC

Evaluating Bundled CMMC Readiness Services: A Strategic Guide

January 21, 2026

CMMC

Florida CMMC Readiness Services: Preparing for Mandatory Compliance

January 14, 2026

CMMC

C3PAO & GRC Tools: Seamless Compliance Integration

January 12, 2026

PCI DSS

PCI DSS Service Providers: What They Are and What They Are Not

January 9, 2026

CMMC

The Defense Contractor’s Guide to CMMC Assessment Readiness

January 7, 2026

PCI DSS

Guardians of the Gate: Mastering PCI DSS Controls for Accounts

November 3, 2025

CMMC

CMMC Acquisition Rule Published: Phase 1 Begins Nov 10

October 24, 2025

CMMC

CMMC 2.0 Final Rule: Get the Roadmap for What’s Next

October 24, 2025

SOC Reporting

Limits of Security-Only, 3-Month Reports for SOC 2® Position

October 20, 2025

Auditwerx Blue Triangle Blog Banner

SOC Reporting

Why SOC* Examination Period Length Matters

October 13, 2025

SOC 2®

Why a 3-Month GRC Report Isn’t a Valid SOC 2® Attestation

October 6, 2025

SOC Reporting

Why a Quality SOC* Assessment Matters

August 30, 2025

SOC Reporting

Debunking Common Myths About GRC Tools and SOC* Reports

August 29, 2025

SOC 2®

SOC 2® Readiness: Why GRC Tools Need an Assessment Firm

August 27, 2025

SOC Reporting

Auditwerx Can Assist with GRC Tool Set Up

August 25, 2025

SOC Reporting

Specialized Assessment Firms: Unmatched Value for Compliance

August 23, 2025

SOC Reporting

Maximize Your GRC Tool’s Impact with Auditwerx Guidance

August 18, 2025

SOC Reporting

GRC Tools: Power-Up Your Compliance, Get Specialized Guidance

August 14, 2025

SOC Reporting

Why GRC Tools Can’t Replace Your Assessment Firm

August 11, 2025

SOC 2®

SOC 2®* Compliance: GRC Tool vs. Assessment Firm

August 6, 2025

PCI DSS

Patch, Scan, Repeat: Mastering PCI DSS Vulnerability Management

August 1, 2025

PCI DSS

Service Accounts vs User Accounts – PCI Key Differences

July 18, 2025

PCI DSS

PCI DSS: Manage EOL Assets & Avoid Tech Obsolescence

July 4, 2025

HIPAA

HIPAA vs. HITRUST: Understanding Key Differences

June 20, 2025

PCI DSS

PCI Frequencies Gone? Welcome to Targeted Risk Analysis

June 4, 2025

PCI DSS

PCI 4.0.1 Req 12.8.5: Vendor Oversight

May 23, 2025

PCI DSS

PCI 12.5.2 Scoping Exercise: A Comprehensive Guide

May 2, 2025

PCI DSS

PCI 4.0.1 – Key Changes You Need to Know

March 10, 2025

CMMC

Final Rule Publication for CMMC Ready for 2025

October 22, 2024

CMMC

CMMC Program Final Rule Published

October 22, 2024

SOC 2®

ISO 27001 vs. SOC 2®*

September 20, 2024

SOC Reporting

6 Key Automation Risks Assessed in the AICPA Peer Review

September 18, 2024

News & Updates

Strategic Compliance Solutions with Drata

July 12, 2024

SOC 2®

Law Firms and the Importance of Strong Cybersecurity Practices

April 10, 2024

SOC 2®

SOC 2®* Type 2: Definition and Scope

January 19, 2024

Auditwerx Blue Triangle Blog Banner

SOC 1®

What is a SOC 1®* Report: How to Prepare and Why You Need It 

January 5, 2024

Auditwerx Blue Triangle Blog Banner

SOC 2®

SOC 2®* Certification: The Basics

December 23, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

Does Your Assessor Do These 3 Things When Collecting Evidence?

December 22, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

3 Tips for Choosing a Security Compliance Partner

December 22, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

How Quickly Can I Get a Compliance Report?

December 22, 2023

Auditwerx Blue Triangle Blog Banner

SOC 2®

Common Reasons for Control Exceptions in SOC 2®* Type 2 Reports

December 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

Does Cybersecurity Compliance Offer a Competitive Advantage?

December 1, 2023

Auditwerx Blue Triangle Blog Banner

HIPAA

The HIPAA Security Rule: Basic Requirements 

June 16, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

Don’t Delay Fourth Quarter Reporting Requirements

June 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

The Compliance Reporting You Need on Your Schedule

June 8, 2023

Auditwerx Blue Triangle Blog Banner

News & Updates

Auditwerx Offers Microsoft SDPR Compliance Solutions

June 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

Fourth Quarter Compliance Reporting Requirements? Don’t delay.

June 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

The Importance of Independence in SOC* Reporting

June 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC 2®

SOC 2®* Assessments and the Effects of Software Tools

June 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC 2®

Risks for Service Organizations When Using SOC 2®* Tools

June 8, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

What is SOC*+?

June 2, 2023

Auditwerx Blue Triangle Blog Banner

SOC 1®

What is a SOC 1®* Report?

May 19, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

What is in a SOC* Report and Why Do I Need One?

May 5, 2023

Auditwerx Blue Triangle Blog Banner

News & Updates

Understanding Automated Compliance Monitoring Tools

April 28, 2023

Auditwerx Blue Triangle Blog Banner

News & Updates

Maintaining Compliance Throughout the Year

April 28, 2023

Auditwerx Blue Triangle Blog Banner

PCI DSS

PCI Assessment: What You Need to Know

April 21, 2023

Auditwerx Blue Triangle Blog Banner

SOC 2®

SOC 2®* Compliance Explained 

April 7, 2023

Auditwerx Blue Triangle Blog Banner

SOC Reporting

The Cost of Non-Compliance

March 24, 2023

Auditwerx Blue Triangle Blog Banner

News & Updates

Another Successful Peer Review for Auditwerx

March 9, 2023

Auditwerx Blue Triangle Blog Banner

HIPAA

Understanding HIPAA IT Compliance

February 17, 2023

Auditwerx Blue Triangle Blog Banner

SOC 2®

SOC 2®* Compliance and Certification

February 10, 2023

Auditwerx Blue Triangle Blog Banner

PCI DSS

What is PCI DSS?

February 3, 2023

Auditwerx Blue Triangle Blog Banner

SOC 2®

SOC 2®* Type 2 Compliance: What It Is and Why You Need It

January 27, 2023

Auditwerx Blue Triangle Blog Banner

PCI DSS

What is PCI Compliance and Who Needs It?

January 20, 2023

Auditwerx Blue Triangle Blog Banner

PCI DSS

Secure PCI Compliance Portal

January 13, 2023

Additional Posts

Understanding the 2022 DoD SRG

January 6, 2023

Auditwerx Can Partner with Your Existing Compliance Tools

December 19, 2022

SOC 2®*: Privacy vs. Confidentiality

December 15, 2022

Understanding PCI DSS v4.0 – Change Summary – Part 3

October 28, 2022

Understanding PCI DSS v4.0 – Change Summary – Part 2

October 21, 2022

Understanding PCI DSS v4.0 – Change Summary – Part 1

October 14, 2022

Meet Our Partners: Stacy Martin, CEO

September 22, 2022

Meet Our Partners: Bridget Boswell

September 22, 2022

SSAE No. 21 & SSAE No. 22: What You Need to Know

September 1, 2022

PCI DSS 4.0: Key Developments You Need to Know

August 12, 2022

What are SOC 1®* IT General Controls?

August 3, 2022

PCI DSS Requirements: What You Need to Know

July 22, 2022

The Basics of SOC 1®* Controls

July 13, 2022

Tools for Success

June 8, 2022

SOC* Type 1 vs SOC* Type 2

May 16, 2022

AOC, ROC, SAQ: The Alphabet Soup of PCI DSS

May 11, 2022

World Password Day

May 5, 2022

Identity Management Day

April 12, 2022

Protect Sensitive Data on World Backup Day

March 31, 2022

Why You Should Have a Clean Desk Policy

March 18, 2022

Data Privacy Day

January 28, 2022

The Benefits of a SOC* Readiness Assessment

January 5, 2022

PCI DSS Compliance Checklist

December 13, 2021

SOC 2®* Compliance Checklist

November 29, 2021

How Much Does a SOC* Report Cost?

November 22, 2021

International Fraud Awareness Week

November 14, 2021

Why Does My Business Need a SOC* Report?

November 9, 2021

SOC 2®* Readiness Checklist

November 8, 2021

What to Know About Emerging SOC 2®* Compliance Software: Part 3

November 3, 2021

What to Know About Emerging SOC 2®* Compliance Software: Part 2

November 2, 2021

What to Know About Emerging SOC 2®* Compliance Software: Part 1

November 1, 2021

SOC* Readiness FAQ

October 11, 2021

Cybersecurity Awareness Month

October 1, 2021

How to Choose a SOC 2®* Assessment Firm

September 17, 2021

SOC 2®* Trust Services Criteria

September 1, 2021

SOC 1®* ICFR Control Objectives

August 31, 2021

PCI DSS Merchant Levels

August 27, 2021

SOC 1®* Compliance Checklist

August 23, 2021

How to Prepare for a SOC* Assessment

August 10, 2021

What is a SOC* Report?

July 31, 2021

What Kind of SOC* Report Does My Company Need?

July 19, 2021

5 Ways to Implement PCI DSS Everyday

July 9, 2021

3 Reasons Why PCI DSS Compliance is Important to Your Business

July 6, 2021

PCI Primer: What is PCI DSS?

June 29, 2021

Are Third-Party Tools Costing You Money?

April 14, 2021

A Few Best Practices for AWS Logical Security

October 6, 2020

PCI Pro Tip: Configuration Standards

September 1, 2020

Best Practices to Consider in a SOC* Assessment Period

June 29, 2020

Navigating Risks in the Midst of the COVID-19 Chaos

June 29, 2020

Incident Response Preparedness

June 1, 2020

When to have Privacy Assessed within a SOC 2®*

June 1, 2020

Working From Home and PCI

April 29, 2020

Continuous Controls Monitoring

April 9, 2020

IT Pro Tip: Working Securely From Home

March 27, 2020

IT Pro Tip: Protect ALL of Your Assets

March 4, 2020