Full width home advertisement

Post Page Advertisement [Top]

We’re a SaaS company & have decided to work on getting SOC 2 compliant. Based on initial research, I found that, - we will need to define & implement controls within the company - gather evidence that we are properly implementing the controls - show it to an auditor & get their report

We’re thinking of using some compliance automation tools ( like Vanta, Drata etc. ) for evidence gathering as it appears most of the tools integrate with our entire stack.

But what about other compliance certifications like GDPR, HIPAA etc. It seems that we don’t need to involve an external auditor & get them self attested.

Does this mean that we can claim ourselves to be GDPR & HIPAA compliant ? In that case, do we need such compliance automation tools (or) can just maintain a list of controls in an excel sheet & just start claiming compliance. Can someone help us out here ? submitted by /u/ExploringGriffin
[link] [comments]


http://dlvr.it/T96Zkp

No comments:

Post a Comment

Subscribe to: Post Comments (Atom)
'; (function() { var dsq = document.createElement('script'); dsq.type = 'text/javascript'; dsq.async = true; dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js'; (document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0]).appendChild(dsq); })();

Bottom Ad [Post Page]

Copyright 2017, " Vpentest ". All rights Reserved.
| Designed by Colorlib