Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
The Simmons Multi-Media Engagement Study is a unique syndicated research program that measures – across multiple dimensions – the relationship between media vehicles and their audiences. This strategic tool provides measures of the cognitive and emotional engagement consumers have with major media properties, which includes broadcast, cable, and syndicated television, major magazines, and Internet sites. The Fall 2009 release of the Simmons Multi-Media Engagement Study utilizes a patented behavioral integration model to map the engagement levels of nearly 800 media vehicle users back to the respondents in the Experian Simmons National Consumer Study, allowing the analysis of media engagement to be filtered by consumer behaviors including users of over 8,000 brands in over 460 product categories. The following slides will demonstrate some powerful examples leveraging the Spring 2009 MME study. Among all U.S. adults, Consumer Reports magazine is the most Trustworthy media vehicle. In fact, 6 of the top 10 Trustworthy media vehicles are print magazines. The other top vehicles include 3 websites and 1 cable television network. When broken down by gender, there are 4 vehicles that remain consistent across the gender breaks, although their rank orders do change. Among media properties that index at 110 or higher for new car intenders*, we can determine which are best for communicating a message of trust. Below are the top vehicles ranked by the percent of new car intenders saying “I trust this to tell the truth.” When ranking print magazines by Ad Attention/Receptivity – the dimension that measures how likely consumers are to notice and pay attention to ads as well as buy advertised products – we find that the top of the list is dominated by niche publications, whose audiences are focused and whose ads are typically targeted. In a similar vein, those magazines that focus on a mass-market audience tend to have the lowest Ad Attention/Receptivity scores. Looking at the statement, “I get valuable information from the ads in this magazine,” we can see some interesting differences between consumers by region. For instance, while American Baby is tops in 3 of the 4 census regions, it is fourth in the Midwest. Smart Money magazine makes the list only in the Northeast and House Beautiful only in the West. Likewise, Family Handyman appears in both the Midwest and South, but not in the Northeast or West. Among print magazines that index at 110 or higher for readers planning to retire in the next year, we can determine which magazines would be ideal for placing ads promoting plans and hobbies for their future free time. The following magazines rank top for future retirees who say “This magazine has ads for things I care about.” The Personal Time Out dimension helps identify vehicles that people like to relax with and to spend their free time using. While there are similarities across users of all ages, these top websites for each age group show that younger users prefer social media and entertainment-oriented sites, while more mature users lean towards lifestyle sites when they just want to kick back. Of the Facebook.com users who say, “I like to kick back and wind down with Facebook.com,” we can look at what retailers they are most likely to shop compared to other online adults. Facebook.com users who like to kick back and wind down on the site are 172% more likely to shop at Express and 130% more likely to shop at Victoria’s Secret or Banana Republic. Should these retailers advertise on Facebook, they could benefit by including messages of escape and time-out. When it comes to word of mouth, synergy is a powerful tool. While 69% of all viewers of The Oprah Winfrey Show say, “This program gives me something to talk about,” this number increases to 81% among those viewers who either read O, The Oprah Magazine or visit Oprah.com. Incredibly, when looking at Oprah viewers who visit her website and also read her magazine, fully 96% say The Oprah Winfrey Show gives them something to talk about, an increase of 39% over all program viewers.
African Americans represent 11% of the U.S. adult population and, as a group, constitute the nation’s largest racial minority market. African Americans are also more optimistic about their financial situation than the general population, and with good reason. According to the Selig Center for Economic Growth, African American buying power reached $913 billion in 2008, up from $590 billion in 2000. By 2013, African American buying power will reach an astonishing $1.2 trillion, meaning that almost nine cents out of every dollar spent in the United States will come from African American consumers. In celebration of Black History Month, Experian Simmons examines the attitudes, behaviors and media consumption of our country’s African American consumers using data from Simmons DataStreamSM, the Simmons National Consumer Study, New Media Study, Multi-Media Engagement Study and Experian MicromarketerG3 as well as findings from our friends at Experian Hitwise. When it comes to attitudes towards personal financial outlook, African Americans are more likely than the average American adult to say that in the next 12 months they will be better off financially. As of December 28th, 2009, 36% of African Americans said they would be better off financially in the next 12 months, compared with 31% of all adults who felt the same. African Americans are trend setters. Below are the top indexing statements on apparel, auto, food and social interaction among African American adults compared to the total adult population. Index relative to total adult population in parentheses. House Beautiful magazine is a great publication for reaching African Americans who respond to print ads. Readers of House Beautiful, for instance, are 37% more likely to be African American and House Beautiful scores 83% higher than the average magazine among African American readers who say they are likely to buy product or services advertised in the magazine. Where in the United States is the best place to find African American consumers with household incomes of $100,000 or more? Hinesville-Fort Stewart, Georgia is tops followed by Fresno and Stockton, California. African American consumers are more likely than the average online adult to use a wide range of emerging technologies and media. For instance, online African American consumers are 20% more likely than average to watch movies online, 19% more likely to listen to Internet radio and 18% more likely to use social tags or bookmarks. Below are the top sites ranked by the percentage of visits coming from the top African American Mosaic lifestyle segments. The list is dominated by social networking sites.
Coffee drinkers in America Coffee plays such an integral part of every day life in America that it may be safe to say that coffee helps the United States go round. In fact, fully 60% of all U.S. households use either whole or ground coffee beans at home. Experian Simmons extensively reviewed the American coffee drinker for this report which features detailed insights into the coffee-drinking American. In addition, we compare the patrons of Dunkin’ Donuts and Starbucks, the leading players in the battle for brew. Coffee in the Home The average U.S. household that uses whole or ground coffee consumes 4.2 cups per day. In total that’s about 280.5 million cups of coffee consumed at home by Americans each day or about 102 billion cups per year. Among households that use coffee, 89% stock regular coffee and 46% stock decaf.* Among households that use coffee, 84% use pre-ground coffee and 26% use whole bean coffee at least some of the time.* Instant Flavored Coffee Over a quarter of households (27%) stock instant coffee. Sixteen percent of households use instant flavored coffee. The most commonly used flavors among instant flavored coffee drinkers are: Older Americans More Likely to Drink Coffee Fifty-seven percent of adults ages 18-24 live in households that use coffee, but 25 to 34 year olds are the least likely to stock coffee in their cupboards with only 54% reporting they use whole or ground bean coffee at home. Coffee Use Increases with Household Income Seventy percent of Americans who report annual household incomes of $150,000+ drink coffee compared with 54% of those with household income less than $25,000. Dunkin' Donuts Vs. Starbucks Dunkin' Donuts 11% of American adults go to DD Between 9.15.08 and 9.15.09 the share of DD customers who go there 6+ times a month is up 11%* DD consumers are 41% more likely than the average adult to be registered Independents and 9% less likely to be registered Republicans Starbucks 13% of American adults go to Starbucks Between 9.15.08 and 9.15.09 the share of Starbucks customers who go there 6+ times a month is down 22% Starbucks consumers are 11% more likely to be registered Independents and 11% more likely to be registered Republicans Coffee Drinkers Are Coffee Drinkers A majority of coffee-drinking Americans are loyal to their franchise. However, there are a considerable number of Dunkin’ Donuts and Starbucks consumers who jump between coffee houses. How Often Americans Order Their Coffee The majority of both Dunkin’ Donuts and Starbucks customers visit each chain between one and five times in a typical month. Learn more about Simmons consumer research and studies.