Alloy’s Post

For my compliance friends that are interested in checking out Drata, they are doing a demo webinar on Sept 27th! If you are looking for a system that will allow you to automate a lot of the pain in the arse compliance things we compliance managers deal with on a daily basis, this is for you! Some of my fav Drata features that I use on the daily: -Integrations with all my toolsets (security awareness like KnowBe4, background check systems, HRIS, cloud infrastructure (AWS, GCP, Azure), version control like Github, MDM integrations for device compliance, identity systems (Okta, MS, etc) -Easy mgmt of all your policies/procedures/evidence libraries -Vendor mgmt and vendor security surveys, as well as automated reminders and templates for yearly vendor reviews -Risk mgmt module that generates your risk assessment report & risk treatment table -Automated monitoring that tells you when you are out of compliance with a control and what needs fixed -One control mapped to multiple frameworks that makes it easier to add new frameworks as your business needs change -Trust center for your clients/prospects where you can grant access & share documentation to ease the pre-sales process or yearly third party reviews Be there or be square! :) #compliancemanagement #riskmanagement #grc #security

certification on The Fundamentals of SOC - Assessment

This course provided great insight into the different tools and resources used by SOC teams and how they work together.

Red Teaming service expertise yielding real results. The breadth of our Red Teaming Capabilities enables organizations to assess their overall attack surface and vulnerabilities across their entire digital surface. Work with THEOS today:

I am very happy to share this completion certificate on fundamentals of SOC assessment #soc #goldbadge #fundamentalsofsoc

Two Types of SOC1 Reports: SOC1 Type 1: This report assesses the design of the controls at a specific point in time. It provides an understanding of the control environment and its suitability but does not evaluate the operating effectiveness of the rules. SOC1 Type 2: This report assesses the controls’ design and operational efficacy over a certain period, often six to twelve months. It provides more comprehensive assurance by assessing the controls’ design, implementation, and effectiveness.

Just completed the LetsDefend SOC Fundamentals course.

🔐 SOC Fundamentals from the SOC Analyst learning Path on LetsDefend! 👏 I recently locked in for one year with LetsDefend with their Black Friday deals. This platform is excellent for LEARNING and TRAINING. #socanalyst #letsdefend #blueteam #soc

cheers to completing the SOC fundamentals course...