Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
Lorem ipsum dolor sit amet, consectetur adipiscing elit. In nec turpis non purus imperdiet pharetra. Duis a egestas ipsum. Pellentesque eget blandit metus. Aenean nibh massa, lobortis id placerat eget, bibendum at ante. Suspendisse posuere, lacus nec blandit sodales, odio odio ullamcorper ante, a lobortis massa mauris vel ex. Sed tortor neque, consectetur non viverra vitae, auctor id eros. Fusce ornare elit in posuere tempor. Mauris vel risus vel lectus fermentum molestie. Mauris sed nisi mattis, porta ex ac, sollicitudin mi. Suspendisse lobortis congue velit, quis fringilla tortor. This content is even better now! This is my Test Heading! This is my Test Heading! This is my Test Heading! This is my Test Heading! Vivamus eleifend in tortor at dignissim. Sed pellentesque, dui at luctus iaculis, mauris lacus mattis libero, et luctus nisi orci vitae dui. Mauris id luctus sem. Nulla ultrices eget diam rutrum gravida. Cras ac blandit sem. Integer a ligula vitae mauris aliquet dignissim id vel nulla. Aliquam sed urna convallis, viverra dolor et, blandit lorem. Aenean vitae lacinia lacus. Duis et eleifend arcu. Phasellus feugiat ligula eget cursus consectetur. Fusce ultrices tincidunt rutrum. Duis nec dui non enim gravida maximus. List Item List Item List Item List Item Maecenas pellentesque purus a diam imperdiet, ac lobortis quam vulputate. Duis vel nunc sed justo interdum efficitur. Ut quis felis scelerisque, finibus ante fringilla, fringilla elit. Mauris ullamcorper, lectus in fermentum rhoncus, lectus velit posuere libero, quis laoreet mauris purus ac felis. Curabitur a nulla lobortis, sagittis lacus laoreet, dapibus velit. Sed aliquam eu nibh ut tincidunt. Aliquam rutrum bibendum dignissim. This is my quote!This is my citation! Phasellus vulputate tortor at ornare commodo. Vestibulum eleifend lacus id fermentum dapibus. Vestibulum nibh metus, posuere in justo in, elementum molestie turpis. Maecenas non volutpat nunc. Sed tortor eros, iaculis eu auctor tristique, faucibus quis quam. Phasellus metus nunc, vulputate non volutpat nec, efficitur sed tellus. Cras luctus, orci ac accumsan tincidunt, nulla massa interdum quam, et congue odio lorem a velit. Praesent ac neque libero. In ornare condimentum quam at bibendum. Praesent sit amet hendrerit mi. Praesent sit amet dui quis lacus accumsan dapibus. In ut fermentum dui, vitae varius nibh. Nam imperdiet non turpis quis ultrices. HeadingHeadingContentContent Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Donec a turpis auctor, aliquam libero ac, cursus augue. Phasellus mollis hendrerit nisl eu sodales. Morbi sit amet odio nisi. Duis nibh lectus, bibendum non nisl sit amet, vehicula consequat felis. Sed arcu mi, venenatis sit amet gravida sed, tempus id lorem. Sed ac ultricies elit. Vestibulum rhoncus euismod dolor, sit amet aliquam est bibendum ut. Nunc sit amet tincidunt libero, a molestie justo. Donec quis varius nisl, ac ornare est. Nullam convallis, quam in elementum congue, justo augue congue massa, ut pretium quam magna vitae massa. Integer tempor aliquam ante, vel cursus quam auctor ac. Pellentesque fringilla neque arcu, condimentum auctor sem suscipit nec. Maecenas cursus dignissim volutpat. This is my content in the classic editor! Lorem ipsum dolor sit amet, consectetur adipiscing elit. In nec turpis non purus imperdiet pharetra. Duis a egestas ipsum. Pellentesque eget blandit metus. Aenean nibh massa, lobortis id placerat eget, bibendum at ante. Suspendisse posuere, lacus nec blandit sodales, odio odio ullamcorper ante, a lobortis massa mauris vel ex. Sed tortor neque, consectetur non viverra vitae, auctor id eros. Fusce ornare elit in posuere tempor. Mauris vel risus vel lectus fermentum molestie. Mauris sed nisi mattis, porta ex ac, sollicitudin mi. Suspendisse lobortis congue velit, quis fringilla tortor. Vivamus eleifend in tortor at dignissim. Sed pellentesque, dui at luctus iaculis, mauris lacus mattis libero, et luctus nisi orci vitae dui. Mauris id luctus sem. Nulla ultrices eget diam rutrum gravida. Cras ac blandit sem. Integer a ligula vitae mauris aliquet dignissim id vel nulla. Aliquam sed urna convallis, viverra dolor et, blandit lorem. Aenean vitae lacinia lacus. Duis et eleifend arcu. Phasellus feugiat ligula eget cursus consectetur. Fusce ultrices tincidunt rutrum. Duis nec dui non enim gravida maximus. Media & Text Heading Maecenas pellentesque purus a diam imperdiet, ac lobortis quam vulputate. Duis vel nunc sed justo interdum efficitur. Learn more Maecenas pellentesque purus a diam imperdiet, ac lobortis quam vulputate. Duis vel nunc sed justo interdum efficitur. Ut quis felis scelerisque, finibus ante fringilla, fringilla elit. Mauris ullamcorper, lectus in fermentum rhoncus, lectus velit posuere libero, quis laoreet mauris purus ac felis. Curabitur a nulla lobortis, sagittis lacus laoreet, dapibus velit. Sed aliquam eu nibh ut tincidunt. Aliquam rutrum bibendum dignissim. Phasellus vulputate tortor at ornare commodo. Vestibulum eleifend lacus id fermentum dapibus. Vestibulum nibh metus, posuere in justo in, elementum molestie turpis. Maecenas non volutpat nunc. Phasellus vulputate tortor at ornare commodo. Vestibulum eleifend lacus id fermentum dapibus. Vestibulum nibh metus, posuere in justo in, elementum molestie turpis. Maecenas non volutpat nunc. Phasellus vulputate tortor at ornare commodo. Vestibulum eleifend lacus id fermentum dapibus. Vestibulum nibh metus, posuere in justo in, elementum molestie turpis. Maecenas non volutpat nunc. Sed tortor eros, iaculis eu auctor tristique, faucibus quis quam. Phasellus metus nunc, vulputate non volutpat nec, efficitur sed tellus. Cras luctus, orci ac accumsan tincidunt, nulla massa interdum quam, et congue odio lorem a velit. Praesent ac neque libero. In ornare condimentum quam at bibendum. Praesent sit amet hendrerit mi. Praesent sit amet dui quis lacus accumsan dapibus. In ut fermentum dui, vitae varius nibh. Nam imperdiet non turpis quis ultrices. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Donec a turpis auctor, aliquam libero ac, cursus augue. Phasellus mollis hendrerit nisl eu sodales. Morbi sit amet odio nisi. Duis nibh lectus, bibendum non nisl sit amet, vehicula consequat felis. Sed arcu mi, venenatis sit amet gravida sed, tempus id lorem. Sed ac ultricies elit. Vestibulum rhoncus euismod dolor, sit amet aliquam est bibendum ut. Nunc sit amet tincidunt libero, a molestie justo. Donec quis varius nisl, ac ornare est. Nullam convallis, quam in elementum congue, justo augue congue massa, ut pretium quam magna vitae massa. Integer tempor aliquam ante, vel cursus quam auctor ac. Pellentesque fringilla neque arcu, condimentum auctor sem suscipit nec. Maecenas cursus dignissim volutpat. Accordion Title #1 Accordion Title #1 Accordion Title #2 Accordion Title #2 Lorem ipsum dolor sit amet, consectetur adipiscing elit. In nec turpis non purus imperdiet pharetra. Duis a egestas ipsum. Pellentesque eget blandit metus. Aenean nibh massa, lobortis id placerat eget, bibendum at ante. Suspendisse posuere, lacus nec blandit sodales, odio odio ullamcorper ante, a lobortis massa mauris vel ex. Sed tortor neque, consectetur non viverra vitae, auctor id eros. Fusce ornare elit in posuere tempor. Mauris vel risus vel lectus fermentum molestie. Mauris sed nisi mattis, porta ex ac, sollicitudin mi. Suspendisse lobortis congue velit, quis fringilla tortor. Vivamus eleifend in tortor at dignissim. Sed pellentesque, dui at luctus iaculis, mauris lacus mattis libero, et luctus nisi orci vitae dui. Mauris id luctus sem. Nulla ultrices eget diam rutrum gravida. Cras ac blandit sem. Integer a ligula vitae mauris aliquet dignissim id vel nulla. Aliquam sed urna convallis, viverra dolor et, blandit lorem. Aenean vitae lacinia lacus. Duis et eleifend arcu. Phasellus feugiat ligula eget cursus consectetur. Fusce ultrices tincidunt rutrum. Duis nec dui non enim gravida maximus. Primary Secondary Maecenas pellentesque purus a diam imperdiet, ac lobortis quam vulputate. Duis vel nunc sed justo interdum efficitur. Ut quis felis scelerisque, finibus ante fringilla, fringilla elit. Mauris ullamcorper, lectus in fermentum rhoncus, lectus velit posuere libero, quis laoreet mauris purus ac felis. Curabitur a nulla lobortis, sagittis lacus laoreet, dapibus velit. Sed aliquam eu nibh ut tincidunt. Aliquam rutrum bibendum dignissim. Phasellus vulputate tortor at ornare commodo. Vestibulum eleifend lacus id fermentum dapibus. Vestibulum nibh metus, posuere in justo in, elementum molestie turpis. Maecenas non volutpat nunc. Sed tortor eros, iaculis eu auctor tristique, faucibus quis quam. Phasellus metus nunc, vulputate non volutpat nec, efficitur sed tellus. Cras luctus, orci ac accumsan tincidunt, nulla massa interdum quam, et congue odio lorem a velit. Praesent ac neque libero. In ornare condimentum quam at bibendum. Praesent sit amet hendrerit mi. Praesent sit amet dui quis lacus accumsan dapibus. In ut fermentum dui, vitae varius nibh. Nam imperdiet non turpis quis ultrices. Heading Heading Heading Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Donec a turpis auctor, aliquam libero ac, cursus augue. Phasellus mollis hendrerit nisl eu sodales. Morbi sit amet odio nisi. Duis nibh lectus, bibendum non nisl sit amet, vehicula consequat felis. Sed arcu mi, venenatis sit amet gravida sed, tempus id lorem. Sed ac ultricies elit. Vestibulum rhoncus euismod dolor, sit amet aliquam est bibendum ut. Nunc sit amet tincidunt libero, a molestie justo. Donec quis varius nisl, ac ornare est. Nullam convallis, quam in elementum congue, justo augue congue massa, ut pretium quam magna vitae massa. Integer tempor aliquam ante, vel cursus quam auctor ac. Pellentesque fringilla neque arcu, condimentum auctor sem suscipit nec. Maecenas cursus dignissim volutpat. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Donec a turpis auctor, aliquam libero ac, cursus augue. Phasellus mollis hendrerit nisl eu sodales. Morbi sit amet odio nisi. Duis nibh lectus, bibendum non nisl sit amet, vehicula consequat felis. Sed arcu mi, venenatis sit amet gravida sed, tempus id lorem. Sed ac ultricies elit. Vestibulum rhoncus euismod dolor, sit amet aliquam est bibendum ut. Nunc sit amet tincidunt libero, a molestie justo. Donec quis varius nisl, ac ornare est. Nullam convallis, quam in elementum congue, justo augue congue massa, ut pretium quam magna vitae massa. Integer tempor aliquam ante, vel cursus quam auctor ac. Pellentesque fringilla neque arcu, condimentum auctor sem suscipit nec. Maecenas cursus dignissim volutpat. Related Posts Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Donec a turpis auctor, aliquam libero ac, cursus augue. Phasellus mollis hendrerit nisl eu sodales. Morbi sit amet odio nisi. Duis nibh lectus, bibendum non nisl sit amet, vehicula consequat felis. Sed arcu mi, venenatis sit amet gravida sed, tempus id lorem. Sed ac ultricies elit. Vestibulum rhoncus euismod dolor, sit amet aliquam est bibendum ut. Nunc sit amet tincidunt libero, a molestie justo. Donec quis varius nisl, ac ornare est. Nullam convallis, quam in elementum congue, justo augue congue massa, ut pretium quam magna vitae massa. Integer tempor aliquam ante, vel cursus quam auctor ac. Pellentesque fringilla neque arcu, condimentum auctor sem suscipit nec. Maecenas cursus dignissim volutpat. Class aptent taciti sociosqu ad litora torquent per conubia nostra, per inceptos himenaeos. Donec a turpis auctor, aliquam libero ac, cursus augue. Phasellus mollis hendrerit nisl eu sodales. Morbi sit amet odio nisi. Duis nibh lectus, bibendum non nisl sit amet, vehicula consequat felis. Sed arcu mi, venenatis sit amet gravida sed, tempus id lorem. Sed ac ultricies elit. Vestibulum rhoncus euismod dolor, sit amet aliquam est bibendum ut. Nunc sit amet tincidunt libero, a molestie justo. Donec quis varius nisl, ac ornare est. Nullam convallis, quam in elementum congue, justo augue congue massa, ut pretium quam magna vitae massa. Integer tempor aliquam ante, vel cursus quam auctor ac. Pellentesque fringilla neque arcu, condimentum auctor sem suscipit nec. Maecenas cursus dignissim volutpat.