Latest news with #TrustServicesCriteria
Yahoo
29-05-2025
- Business
- Yahoo
Certify Achieves Third Consecutive SOC-2 Compliance
Milestone underscores company's enduring commitment to data security and compliance NEW YORK, May 29, 2025 /PRNewswire/ -- Certify, the provider data intelligence company, today announced it has achieved Service Organization Control (SOC) 2 Type 2 compliance for the second consecutive year, building on their initial SOC-2 Type 1 certification received in 2023. The achievement demonstrates Certify's ongoing dedication to maintaining the highest standards of security, privacy, and compliance in an increasingly digital healthcare environment. "Our three-year track record of SOC-2 compliance reflects our unwavering commitment to security excellence," said Shannon Kern, Senior Director of Quality, Compliance and Security at Certify. "These certifications validate that our comprehensive security framework doesn't just exist on paper but operates effectively every day across our entire organization. For our healthcare clients, this means peace of mind knowing their sensitive data is protected by proven, independently-verified safeguards that meet the industry's highest standards." The SOC-2 Type 2 audit examination, administered by the American Institute of Certified Public Accountants (AICPA), evaluates an organization's information systems and security controls over a rigorous 12-month period. Certify underwent assessment across 131 controls spanning nine categories of the Trust Services Criteria (TSC) for Security, including control environment, communication and information, risk assessment, monitoring controls, logical and physical access controls, system operations, change management, and risk mitigation. As healthcare organizations continue their digital transformation journey, security certifications have become essential indicators of reliability and trustworthiness. "We see these certifications as stepping stones, not finish lines," added Kern. "We're building the most robust compliance framework and security posture possible, with privacy as our ultimate guide. Our goal has always been to exceed industry standards and make it easy for our healthcare clients to trust us with their sensitive information." Certify's security program aligns with industry-leading frameworks like NIST, and includes continuous monitoring, encryption, secure system architecture, antivirus and malware protection, annual penetration testing, business continuity testing, and other organization-wide compliance protocols (e.g., security awareness training, vendor risk assessment). Certify takes a rigorous and comprehensive approach to security and compliance in support of our healthcare partners. On June 25th, we're hosting a webinar to discuss how we're helping our clients stay ahead of changes to the NCQA credentialing changes; you can reach out to your client relationship manager or email sales@ to request an invite. About Certify Certify is the architect of modern provider data infrastructure — combining best-in-class technology, best-in-class data, and deep domain expertise to transform how healthcare operates. Entering the market in 2021 as a credentialing platform, Certify now powers the full provider data lifecycle through a continuously updated source of truth powered by thousands of primary sources and available through one API. The provider data intelligence company is backed by esteemed investors including General Catalyst and Upfront Ventures. For more information, please visit us at Media Contact Emily View original content to download multimedia: SOURCE Certify Error in retrieving data Sign in to access your portfolio Error in retrieving data Error in retrieving data Error in retrieving data Error in retrieving data
Arabian Post
27-05-2025
- Business
- Arabian Post
Building Trust Through SOC 2 Audit Preparedness
Arabian Post Staff -Dubai Companies handling sensitive customer data are increasingly adopting SOC 2 audit readiness as a strategic imperative, not merely a compliance checkbox. This proactive approach is becoming essential for businesses aiming to secure partnerships, streamline operations, and fortify their reputations in a competitive digital landscape. SOC 2, developed by the American Institute of Certified Public Accountants , evaluates an organisation's controls related to security, availability, processing integrity, confidentiality, and privacy. Achieving SOC 2 compliance demonstrates a company's commitment to data protection and operational excellence. ADVERTISEMENT A SOC 2 readiness assessment serves as a preliminary evaluation to identify and address potential gaps in an organisation's control environment before undergoing the formal audit. This process involves a thorough review of policies, procedures, and systems to ensure they align with the Trust Services Criteria. By conducting this assessment, companies can proactively mitigate risks and enhance their security posture. The benefits of SOC 2 readiness extend beyond compliance. Organisations that complete the assessment often experience increased efficiency in their audit processes, reduced time and resources spent on remediation, and improved confidence among stakeholders. Furthermore, a successful SOC 2 audit can serve as a competitive differentiator, signalling to clients and partners that the company prioritises data security and integrity. In sectors where data breaches can have significant financial and reputational consequences, SOC 2 readiness is particularly valuable. It enables companies to identify vulnerabilities, implement robust controls, and establish a culture of continuous improvement in their security practices. This proactive stance not only safeguards sensitive information but also positions organisations as trustworthy and reliable partners.
