Browse Information Systems and Controls (ISC)
-
-
- 3.1 COSO Internal Control – Integrated Framework: Relevance to Information Systems
- 3.2 COSO ERM for IT: Risk Management Across Digital Environments
- 3.3 COBIT 2019 Overview: Governance System Principles and Components
- 3.4 Other Influential Standards and Regulations (e.g., PCI DSS, HIPAA, GDPR)
- 3.5 ITIL and IT Service Management Overviews
-
-
- 10.1 Change Control Concepts: Policies and Procedures
- 10.2 Environments and Testing (Development, QA/Staging, Production)
- 10.3 Patch Management: Risks and Controls
- 10.4 Continuous Integration and Continuous Deployment in Modern DevOps
- 10.5 Systems Development Life Cycle (SDLC): Waterfall vs. Agile/DevOps
-
-
-
-
-
Chapter 27: SOC for Cybersecurity
In this section
-
Key Differences Between SOC 2® for Security vs. SOC for Cybersecurity
Discover how SOC 2® for Security focuses on specific trust services criteria while SOC for Cybersecurity adopts a broader lens on enterprise-wide cyber risk management and disclosure.
-
Description Criteria for Cybersecurity Risk Management
Explore how organizations describe and demonstrate their cybersecurity risk management programs for SOC for Cybersecurity engagements, focusing on presentation requirements, testing methodologies, and key stakeholders' responsibilities.
-
Considerations for Complex IT Environments and Response Plans
Discover advanced considerations for SOC for Cybersecurity in large-scale, distributed IT environments, including incident response strategies and best practices.
-
Communicating Cybersecurity Findings to External Stakeholders
Explore strategies, frameworks, and best practices for effectively communicating cybersecurity findings to boards, regulators, and the public within SOC for Cybersecurity engagements.
