Cyber Risks · GreyNoise Blog

Grey Noise Intelligence Achieves SOC 2 Type II Compliance Designation

Summary: GreyNoise Intelligence announced on June 8, 2023 that it achieved SOC 2 Type II compliance, also known as SSAE 18, under AICPA standards for Systems and Organizational Controls, with an unqualified opinion. The audit covers the five trust service principles of security, availability, processing integrity, confidentiality and privacy, and the company says it used the process to codify and strengthen its security and data protection practices rather than do the minimum to pass.

What you should know: An unqualified SOC 2 Type II opinion is third-party validation of how a vendor actually operates its controls over a period, which is the evidence security leaders need when a supplier holds data on internet scanning traffic and feeds it into their detection stack.

Read the original at GreyNoise Blog ↗

Topics
Privacy
Related