Ryan Buckner

Ryan Buckner is a Principal and Chief Knowledge Officer at Schellman. Ryan currently serves on Schellman’s attestation leadership team and leads the firm-wide research and development for attestation methodology. Ryan is a CIPP, CISSP, CISA, ISO 27001 Lead auditor, and maintains multiple CPA licenses, among other certifications. Ryan is also an AICPA-approved and nationally listed Peer Review Specialist for SOC examinations. Having directly performed and completed over 1,000 service audits, Ryan is one of the most experienced service auditors in the world.

  • Should You Include Privacy as a Trust Service Category In Your SOC 2?

    Should You Include Privacy as a Trust Service Category In Your SOC 2?

    Not sure if you need the privacy category in your SOC 2? Put that confusion to rest as we detail the advantages and drawbacks of such, along with some alternatives that may suit your needs better.

    Read Article
  • Which Trust Services Categories Should I Include In My Next SOC 2 Report?4:50

    Which Trust Services Categories Should I Include In My Next SOC 2 Report?

    Watch Video
  • How Much Do FedRAMP Assessments Cost?4:33

    How Much Do FedRAMP Assessments Cost?

    Watch Video
  • How Much Does a Penetration Test Cost?3:05

    How Much Does a Penetration Test Cost?

    Watch Video
  • SOC 2 vs SOC 3 - Either, Neither, or Both?3:31

    SOC 2 vs SOC 3 - Either, Neither, or Both?

    Watch Video
  • What Does a SOC Audit Cost? 3 Big Factors That Will Affect Your Pricing

    What Does a SOC Audit Cost? 3 Big Factors That Will Affect Your Pricing

    Wondering what a SOC audit costs? To help you set price expectations, we lay out our rough price ranges, along with 3 variables that will factor into your final number.

    Read Article
  • What Is The Process of a SOC Examination2:58

    What Is The Process of a SOC Examination

    Watch Video
  • How to Read Your Vendor’s SOC Report

    How to Read Your Vendor’s SOC Report

    Not sure which SOC report to request from your vendor(s)? Wondering how to get what you need out of it once you have it in hand? Learn exactly where to look for the information you need.

    Read Article
  • How Long Does a SOC 2 Examination Take?1:51

    How Long Does a SOC 2 Examination Take?

    What is the typical timeline for a SOC 2 Examination? Ryan Buckner has your answer.

    Watch Video
  • What Does a SOC 2 Examination Cost?6:52

    What Does a SOC 2 Examination Cost?

    Watch Video
  • What is the difference between a Type 1 and a Type 2 SOC Report?2:39

    What is the difference between a Type 1 and a Type 2 SOC Report?

    With 5 different SOC reports, Ryan Buckner breaks down the difference between a Type 1 and Type 2 SOC examination.

    Watch Video
  • SOC for Supply Chain2:54

    SOC for Supply Chain

    Watch Video
  • In-Home Relationships2:01

    In-Home Relationships

    Watch Episode
  • 3 Tips to Stay Tuned In1:46

    3 Tips to Stay Tuned In

    Watch Episode
  • The Extra Day2:07

    The Extra Day

    Watch Episode
  • COVID-19 and SSAE 18: What Does This Mean for Your SOC Preparedness

    COVID-19 and SSAE 18: What Does This Mean for Your SOC Preparedness

    Hopefully this writing finds you well and adjusting to perhaps the most serious health-related situation in many a lifetime. Perhaps it may find you contemplating preparedness in specific ways.

    Read Article
  • Why Diversity is a Terrible Goal for Black Professionals

    Why Diversity is a Terrible Goal for Black Professionals

    While it’s true that life and the American experience has tremendously improved for most black Americans since the Civil Rights Movement, there remains much opportunity for continued progress.

    Read Article
  • Optimizing The Audit2:45

    Optimizing The Audit

    A Buck For Your Thoughts - Episode 001

    Watch Video
  • Recodifying SOC reports: What SSAE No. 18 means for SOC 1s

    Recodifying SOC reports: What SSAE No. 18 means for SOC 1s

    Originally published in Accounting Today Simply put, SSAE No 18 is the standard which recodifies all the previous attestation standards. It is the culmination of the efforts to clarify...

    Read Article
  • Cha-Ching: How Compliance Can Generate Revenue

    Cha-Ching: How Compliance Can Generate Revenue

    CIOs have a unique vantage point over their organization.  From where they sit, they see efficiencies, pain points, and potential weaknesses across all departments.  This level of visibility is...

    Read Article
  • loading
    Loading More...