))
Much Ado About SOC 2: Best Practices for Healthcare SOC 2 Audits
Manage episode 319038753 series 3052259
Sisällön tarjoaa Makala Barsolona and Britton Burton | Sr Director of Product Strategy. Makala Barsolona and Britton Burton | Sr Director of Product Strategy tai sen podcast-alustan kumppani lataa ja toimittaa kaiken podcast-sisällön, mukaan lukien jaksot, grafiikat ja podcast-kuvaukset. Jos uskot jonkun käyttävän tekijänoikeudella suojattua teostasi ilman lupaasi, voit seurata tässä https://fi.player.fm/legal kuvattua prosessia.
Cyberattacks against healthcare organizations and their business associate vendors have begun to threaten patient safety and fundamental business operations. As a result, SOC 2 audit reports have become one of the most common and cost-effective vehicles for healthcare organizations to demonstrate the adoption of controls relevant to security, availability, confidentiality, processing integrity, and privacy.
However, acquiring a SOC 2 audit report can be a challenge for many organizations and there are often questions that arise about how to achieve SOC 2 compliance with the least amount of cost, effort, and time.
Join us for this episode of The CyberPHIx where we hear from Paul Gray, Chief Information Security Officer for Meditology Services.
Paul provides insights from his decades of experience with SOC 2 best practices including answering some frequently asked questions including:
- What is SOC 2 compliance?
- What are the different types of SOC audits including SOC 1, SOC 2, and SOC 3?
- Why do healthcare organizations obtain SOC 2 audit reports?
- Are healthcare vendors required to obtain SOC 2 reports?
- What are the AICPA Trust Criteria?
- What other certifications are available for healthcare organizations?
- What should healthcare organizations do to prepare for a SOC 2 audit?
- What are critical success factors for a successful SOC 2 engagement?
- What are some common pitfalls for healthcare organizations seeking to obtain a SOC 2 audit report?
99 jaksoa
Jaa
