Latest Content

Going through a SOC examination and not sure what to do about your subservice organizations? We break down the two options you have, as well as considerations to make before selecting a method.

The Big 4 are usually everyone's first instinct when it comes to SOC reports. We break each firm down and provide questions you can ask them all as you search for the right compliance firm for you.

Doing a SOC 2 audit but not sure what all you need to include? Learn about 3 clear steps you can take to more easily define the scope of your SOC 2 examination.

Before you engage a FedRAMP 3PAO like Schellman to assess you, you'll need the services of a consultant. Read how these advisors can help you & what to ask them to ensure you get the best one for you.

Heard of C5 but not sure if it's right for you? We weigh the pros and cons of this compliance project for you to help make your decision--one way or the other--easier.

May is National Skin Cancer Awareness Month. Schellman's Chief Growth Officer Doug Barbin shares his personal experience and tips for avoiding melanoma—the silent but deadly disease.

How will you need to manage risk under PCI DSS v4.0? We outline how you can update and improve your risk framework so that you ensure compliance with the new standard and its changes.

Need a comprehensive cloud computing control framework? We break down one option in C5 and how you can best prepare for an examination of this kind.