How to Decode Third-Party SOC 2 Reports

Instead of completing a full standards-based risk assessment, some vendors simply submit their most recent SOC 2 report. However, for organizations that lack the expertise and resources, interpreting these SOC 2 reports can be complex and time-consuming – not to mention inconsistent with how other vendors are assessed.

How do you simplify the process of analyzing SOC 2 reports and get what you need to visualize important vendor risks?

Join compliance expert Thomas Humphreys as he:

• Deconstructs a typical SOC 2 report, including the five Trust Services Principles
• Explains how to map SOC 2 report control exceptions into risks in a common vendor risk and security framework
• Describes best practices to remediate a vendor's SOC 2 control deficiencies

Watch this webinar to learn how to analyze the effectiveness of a vendor's security controls consistently with the rest of your third-party estate.