Information Security

This message was posted by a user wishing to remain anonymous For your vendors that host customer data, any best practices you utilize for ongoing monitoring aside of annual SOC reviews and annual key document review/collection? As an example, sending ... More

My opinion would be to accept FedRAMP certification as an alternative to a SOC report for performing due diligence on an organization's IT infrastructure. FedRAMP audits are more specific and in depth than SOC reports which can be adjusted by the organization ... More

This message was posted by a user wishing to remain anonymous Hello, Is FedRAMP an acceptable alternative to a SOC report? Our potential vendor does not have a SOC report. Thank in advance for your response More

I too agree with Dave and the other post, however I will offer some additional insight (if you will indulge me with a little story telling). My personal information was first stolen in 1985. Some IT guy left back-up tapes in the back seat of his car ... More

This message was posted by a user wishing to remain anonymous Because the question is a bit ambiguous, will answer in two parts. 1) On site inspection of information security at data centers: If the question is asking about physical security at data ... More