SOC 2 Type 2 Compliance: Genetec Cloud products and ISMS that governs them
Companies transmit and store sensitive information online every day. That means it’s more important than ever to ensure partners are following best practices when it comes to cybersecurity. One way to make sure software vendors are taking this seriously is to check if they are SOC 2 compliant.
A System and Organization Controls (SOC) report indicates that the organization meets industry standards in regulating information, as determined by an independent audit by a certified public accountant. This report offers partners peace of mind, as it is a stamp of approval that the company is compliant with best practices in data protection, and has all the appropriate safeguards and procedures in place to control who can access sensitive data.
Genetec compliance
We are pleased to announce that our SOC 2 Type 2 report is complete and available for customers and prospects. The following Cloud products and the ISMS (Information Security Management System) that govern them were all part of the
impartial audit:
Benefits of working with a SOC 2 Type 2 compliant partner
SOC 2 compliance is the most comprehensive proof of a technology company’s commitment to safeguarding client data — and its a stamp of approval that’s increasingly required by regulators and auditors. It’s also a helpful checkpoint for service providers, as it ensures that staff throughout the organization are aware of the best procedures to follow to safeguard client data.
The auditing process produces a detailed report outlining the processes and controls in place, and specifies controls and processes clients must follow when working with the service organization to ensure end-to-end compliance with best practices in data protection. If there are any gaps in the current system of controls, these will be highlighted in the report.
Choosing a partner with SOC 2 compliant security programme provides peace of mind that proper procedures are in place to ensure your data is secure, private, and confidential. It also provides independent validation that controls are in place to deliver on the vendor’s promised service availability and processing integrity.