Everything you need to know about security compliance

Whether you're new to cybersecurity or expanding an already robust security stance, we have resources to support your learning. 

Blog

See all
NIST
March 21, 2023

Who needs CMMC certification?

Security compliance
March 21, 2023

How do I conduct a vendor risk assessment?

Security compliance
March 18, 2023

What are the 6 stages of risk management?

SOC 2
March 14, 2023

Everything you need to know about the SOC 2 audit process

SOC 2
February 23, 2023

How do I become SOC 2 Type 2 compliant?

SOC 2
February 21, 2023

The difference between SOC 1 and SOC 2

GDPR
February 16, 2023

What was the data protection act of 1988?

Security compliance
February 15, 2023

A smarter way to get your security certifications

SOC 2
February 13, 2023

Who must comply with SOC 2 requirements

Strike Graph news
February 8, 2023

Announcing a smarter way to get security certifications

SOC 2
February 2, 2023

Can you fail a SOC 2 audit?

SOC 2
February 1, 2023

How much does a SOC 2 audit cost?

Pen test
January 27, 2023

6 types of vulnerability scanning

Security compliance
January 26, 2023

Why are governance, risk, and compliance important?

Pen test
January 26, 2023

What is a network security test?

Security compliance
January 25, 2023

Compliance attestation: What it is and how it affects your business

Security compliance
January 22, 2023

Regulatory compliance software: Which should you choose?

CCPA/CPRA
January 13, 2023

The CPRA – California Privacy Rights Act – is here!

Security compliance
January 9, 2023

What is a security audit and how can it benefit your small business?

Security compliance
December 29, 2022

What is compliance tracking?

ISO 27001
December 27, 2022

Do you need an ISO 27001 audit in 2023? Probably!

Security compliance
December 22, 2022

Security compliance for startups: 3 reasons you need to start now

Security compliance
December 20, 2022

What is the purpose of compliance risk management?

Strike Graph news, NIST
December 14, 2022

Strike Graph now offers NIST 800-171

Security compliance
December 12, 2022

What is cybersecurity governance?

HIPAA
November 25, 2022

HITRUST vs. HIPAA

NIST
November 23, 2022

What are the NIST SP 800-171 controls?

Security compliance
November 22, 2022

What is an information security policy, and do you need one?

NIST
November 17, 2022

What is NIST certification?

GDPR
November 16, 2022

A cheatsheet for common GDPR terms

NIST
November 16, 2022

What are the 5 steps in the NIST cybersecurity framework?

SOC 2
November 2, 2022

SOC 2 Type 1 vs Type 2 — What’s the difference?

Security compliance
October 31, 2022

What are the 7 types of risk?

GDPR
October 25, 2022

What is required for GDPR compliance?

Security compliance
October 24, 2022

Understanding cybersecurity compliance

ISO 27701
October 19, 2022

How many controls are there in ISO 27701?

Security questionnaires
October 18, 2022

What is a vendor risk assessment questionnaire?

HIPAA
October 11, 2022

Unlock revenue with HIPAA compliance

HIPAA
October 7, 2022

What are the rule exceptions to HIPAA?

Strike Graph news
October 5, 2022

Top 5 things our customers love about Strike Graph

GDPR
September 28, 2022

What are the 8 GDPR rights?

CCPA/CPRA
September 26, 2022

What are the exceptions to CCPA?

PCI DSS
September 21, 2022

What is a PCI Qualified Security Assessor?

SOC 2
September 15, 2022

Unstructured data and its impact on SOC 2 compliance

Strike Graph news
September 8, 2022

Succeed together — from far apart

CCPA/CPRA
September 7, 2022

Who needs to comply with the CCPA?

ISO 27001
August 31, 2022

How much does ISO 27001 certification cost?

ISO 27001
August 30, 2022

ISO 27001 controls

HIPAA
August 23, 2022

The HIPAA Privacy Rule: Is your organization a covered entity?

ISO 27001, GDPR, ISO 27701
August 18, 2022

ISO vs. GDPR compliance requirements

Security compliance
August 16, 2022

Security frameworks 101

PCI DSS
August 12, 2022

Who must comply with PCI DSS?

HIPAA
August 9, 2022

What are the 3 rules of HIPAA?

Strike Graph news
August 5, 2022

We achieved SOC 2 Type 2 compliance!

Security compliance
July 26, 2022

What is TPRM or third-party risk management?

HIPAA
July 25, 2022

What is summary health information?

SOC 2
July 24, 2022

The difference between SOC 1, SOC 2, and SOC 3

Security compliance
July 23, 2022

What is compliance risk?

CCPA/CPRA
July 21, 2022

Get your business ready for the California Privacy Rights Act (CPRA)

PCI DSS
July 21, 2022

What are the 4 PCI DSS levels?

GDPR
June 24, 2022

What are the 7 GDPR principles?

ISO 27001, ISO 27701
June 21, 2022

What’s the difference between ISO 27001 and 27701?

PCI DSS
June 8, 2022

The 12 PCI DSS requirements: an in-depth look

Security compliance
June 3, 2022

From cost concern to opportunity maker

GDPR
May 27, 2022

Need a quick guide to GDPR? Start here.

PCI DSS
May 16, 2022

What is PCI DSS?

PCI DSS, Strike Graph news
May 16, 2022

Strike Graph now supports PCI DSS

CCPA/CPRA
May 4, 2022

CCPA / CPRA compliance: What you need to know

ISO 27701
April 7, 2022

ISO 27701 basics

Security compliance
April 2, 2022

Compliance in the education technology industry

Security questionnaires
March 24, 2022

Understanding and accelerating security questionnaires

Security compliance
March 11, 2022

Auditors and security controls: where to draw the line

SOC 2, Security questionnaires
March 2, 2022

12 vendor management best practices

SOC 2
February 28, 2022

AICPA guidance and SOC 2 audit practices

SOC 2
February 22, 2022

How our customers achieve success with flexible compliance management

ISO 27001
February 17, 2022

The differences between ISO 27002: 2013 and ISO 27002: 2022

Pen test
February 15, 2022

Cost of penetration testing

ISO 27701, Strike Graph news
February 10, 2022

Strike Graph now supports ISO 27701

Security compliance
February 1, 2022

Understanding regulation, security, governance, and compliance

Security compliance
January 25, 2022

Antivirus software: helpful or harmful?

SOC 2
January 19, 2022

What is a bridge letter in a SOC 2 report?

Security compliance
January 11, 2022

Processes, policies and controls: what's the difference?

Strike Graph news
January 4, 2022

Entrepreneurial itch to enterprise software: how Strike Graph came to be

Security compliance
December 22, 2021

3 easy ways to keep calm and stay focused during audit season

Security compliance
November 17, 2021

Why trust assets are essential to growing your business

SOC 2, HIPAA
November 3, 2021

HIPAA + SOC 2: Why tackling them in unison makes sense

SOC 2
September 15, 2021

SOC 2 tools for startups that won't break the bank

Strike Graph news
September 14, 2021

Announcing our Series A!

SOC 2
August 10, 2021

How much time does it take to prepare for a SOC 2 audit?

SOC 2
August 5, 2021

SOC 2 test exceptions — what are they and how to address them

SOC 2
August 3, 2021

SOC 2 framework: a path to good operational governance

Security questionnaires
July 28, 2021

Security questionnaires 101: the basics

Security compliance
July 14, 2021

Deciphering integrations and automation in SaaS IT compliance tools

Security compliance
May 28, 2021

How to conduct a risk assessment

Pen test
May 27, 2021

Interview with a penetration tester

Security compliance
May 20, 2021

Takeaways from Biden’s cybersecurity executive order

SOC 2, Strike Graph news
May 10, 2021

5 lessons learned from our own SOC 2 journey

SOC 2
May 5, 2021

What to know, how to begin, and why to prioritize a SOC 2 audit

Security compliance
April 22, 2021

Ask an auditor and compliance geek

Pen test
April 20, 2021

Pen test FAQs

SOC 2
April 15, 2021

Understanding the ROI from SOC 2 (or any certification)

SOC 2
April 15, 2021

The secret ingredient for a smooth SOC 2 audit

Security questionnaires
April 8, 2021

Our #1 tip for completing security questionnaires

SOC 2
April 1, 2021

The dangers of a checklist approach to SOC 2 compliance

SOC 2
March 26, 2021

What are SOC 2 Complementary User Entity Controls (CUEC)?

Security questionnaires
March 25, 2021

Solved: security questionnaires, RFPs, and revenue hurdles

SOC 2, ISO 27001
March 24, 2021

The difference between SOC 2 and ISO 27001

Security compliance
February 16, 2021

EdTech and cybersecurity: what leaders need to understand

SOC 2
February 11, 2021

SOC 2 System Description series: how to describe your System Boundaries

SOC 2
February 5, 2021

How SOC 2 auditors test

SOC 2
February 4, 2021

Are you ready for your SOC 2 audit?

SOC 2
January 26, 2021

You got your SOC 2! Now what?

SOC 2
January 14, 2021

How long does it take to get a SOC 2 Type 1? And how long does it last?

SOC 2
January 6, 2021

SOC 2 Trust Services Criteria: how to choose

Security compliance
December 30, 2020

What is a control?

SOC 2
December 17, 2020

How to use your cybersecurity program to drive sales

SOC 2
December 14, 2020

SOC 2 System Description series: adding additional TSCs

SOC 2
December 10, 2020

SOC 2 service commitments and system requirements

SOC 2
December 7, 2020

SOC 2 System Description series: creating trust in company leadership

SOC 2
December 2, 2020

Crawl, walk, run: we understand the SOC 2 journey because we've been there

SOC 2, Strike Graph news
November 28, 2020

Announcing Strike Graph v1.1: System Description and enhanced SOC 2 dashboard

SOC 2
November 3, 2020

Security theater: not another policy!

SOC 2
May 19, 2020

Don't fail your SOC 2 because of a just-do-it attitude

Strike Graph news
April 7, 2020

Welcome to Strike Graph

Get the latest security compliance
news in your inbox.

Subscribe to our newsletter to stay ahead of compliance requirements and get an edge on the competition.

Strike Graph offers an easy, flexible security compliance solution that scales efficiently with your business needs — from SOC 2 to ISO 27001 to GDPR and beyond.

Popular Insights
SOC_NonCPAA

@ 2022 Strike Graph, Inc. All Rights Reserved • Privacy Policy