Audit

8 items tagged with "audit"

Filter by type:

Best Practices3

Event Sourcing

An architecture pattern that stores every change to application state as an immutable sequence of events, making the event log the source of truth instead of current state.

Best Practice

SOC 2 is an AICPA auditing framework that assesses how a service organization protects customer data against five Trust Services Criteria: security, availability, processing integrity, confidentiality, and privacy.

Best Practice

PCI DSS Compliance

PCI DSS is the global security standard for organizations that handle payment card data, defining requirements to protect cardholder data across networks, systems, and processes.

Tutorials1

Tutorial

Produce an SBOM for Compliance and Audit

Generate an SPDX or CycloneDX SBOM as documented evidence for a compliance audit, with a readable report to accompany it.

Regulations2

Regulation

Sarbanes-Oxley Act

US federal law mandating certain practices in financial record keeping and reporting for corporations

Regulation

Sarbanes-Oxley Act of 2002

US law mandating accurate financial reporting and internal controls for public companies, with implications for IT and data integrity.

FAQs2

FAQ

What is SOC 2 compliance?

SOC 2 is an audit framework from the AICPA that evaluates how a service organization manages customer data against five Trust Services Criteria: secur...

FAQ

What is ISO 27001?

ISO/IEC 27001 is an international standard that specifies the requirements for an information security management system (ISMS), a risk-based framewor...