SSAE 18 Compliance
The Statement on Standards for Attestation Engagements 18 (SSAE-18) makes SOC 2 and SOC 3 compliance audits more worrisome. If you are using these standards, you literally can not shake all the spreadsheets fast enough.
Since May 2017, the SSAE-18 auditing standards require service providers to confirm and re-confirm third-party-vendor certification and controls on an ongoing basis. If one of your sub processors gets breached or its risk level increases, you need to report the change in a timely manner. Otherwise, your enterprise could lose its SOC certification a devastating blow to revenues and reputation.
But how can you keep track of what everyone else is doing. You don’t have eyes in the back of your head, or in every contractors office. Then again you do not need them with GRC Labs.
GRC Labs Continuous Monitoring feature lets you audit vendors in a few clicks, as often as you wish. Its user friendly compliance dashboard and heat maps show you trouble spots in a glance. Another click, and you’are sending reports to your auditing team, keeping your enterprise SOC compliant even if others fall short.
Compliance and Risk Management Made Simple
Simple deployment
Rapidly deploy a risk management and compliance program so you can focus on the security in information security compliance.
Unified Control Management
Map controls across multiple frameworks for visibility into defense mechanism strengths and weaknesses.
Centralized Dashboard
Access key metrics to build a compliance program that responds to the protection your information security program provides.