Home

Category: Compliance & Regulations

Network cables connected to servers in a data center
SOC 2 Vendor Management: A Third-Party Risk Guide for SaaS Companies
What SOC 2 CC9.2 requires for vendor management, what auditors look for, and how SaaS companies should review a vendor's SOC 2 report.
Member entering a PIN on an ATM keypad
Credit Union Third-Party Risk Management: Meeting NCUA Vendor Due Diligence Expectations
What NCUA examiners expect from credit union vendor management, which guidance applies, and how to build an examiner-ready third-party risk management program.
Two doctors reviewing patient information on a tablet
HIPAA Vendor Risk Management: How to Assess and Monitor Business Associates
A signed BAA isn't vendor due diligence. Learn what HIPAA requires for business associate oversight and how to assess and monitor healthcare vendors.