19 Aug InfoSec Strategies | Category - Pivot Point Security With Security Attestations, Size Matters (Not Yours… Your Clients’) January 15, 2024 By Richard Barrus Why should security attestations be different from clothing, shoes, bank accounts and, well, a lot of things… You may not like it but y... Continue reading
23 Jul InfoSec Strategies | Category - Pivot Point Security 4 Reasons to Establish and Exercise Your Right to Audit Vendors June 19, 2024 By Richard Barrus How do you really know your highest-risk vendors are doing what they say they’re doing, security-wise—especially if it involves meeting... Continue reading
03 Jun Business Continuity Management, Disaster Recovery, InfoSec Risk Assessment, InfoSec Strategies | Category - Pivot Point Security, ISMS Consulting, ISO 22301 5 Top Information Security Accreditations for SaaS Providers January 19, 2024 By Richard Barrus The SaaS model depends on trust. As a SaaS provider, are potential customers confident they can trust you with their data? Despite mas... Continue reading
16 Apr Third Party Risk Management Agreed Upon Procedures (AUP) vs. SOC 2 January 4, 2024 By Richard Barrus Editor’s Note: This post was originally published in April 2017. It has been updated to reflect the name change from AUP to SCA. A Sta... Continue reading
05 Apr Third Party Risk Management 3 Top Tips to Streamline Your Vendor Questionnaires without Compromising Risk Management June 17, 2024 By Richard Barrus When it comes to vendor risk management questionnaires, less can definitely be more. In this post, I’ll share three value-add tips on w... Continue reading