Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
Short-form video content is becoming more prevalent on video-sharing platforms. Keep up with trends and marketing strategies to stay relevant.
Experian received top ranks for hashed emails (HEMs) and demographic data from Truthset Data Collective Advertisers, technology partners, and agencies are all chasing accurate data to power their marketing strategies. Turns out, not all data is created equal and unless you’re working with the right partner, high-quality data can be hard to find. That’s because accuracy can vary widely across the industry and the partner you choose is important. A recent study conducted by data validation company Truthset showed that 51% of the data used for ad targeting and audience measurement is wrong, with average accuracy rates ranging between 32%-69% across data providers. The data quality challenge The lack of high-quality data poses multiple challenges in the advertising world: Wasted ad spend: without accurate data at the start, marketers can’t reach the right audiences, resulting in wasted impressions. Privacy and compliance: in an increasingly privacy-centric world, advertisers need to be especially mindful of accurate targeting to avoid putting their brand reputation at risk. Poor campaign performance: low-quality data skews metrics and attribution models, making it difficult to measure campaign success and optimize spend. Low-quality data can come in different forms like inconsistent or outdated information – think demographics (age, gender) and interests (dog versus cat lover) or simply the wrong relationship can be made between datasets. Data records can be incomplete or duplicative and data segments could be misclassified or inaccurate. For example, a kids snack food company may think they’re targeting a 35-year old man, who lives in the suburbs with his young family when in fact it’s a 65-year-old woman who moved to the city after her kids went to college. It’s wasted dollars!Build the data foundation Data quality needs to be addressed if advertisers and advertising technology partners want to fulfill consumers’ demand for personalized marketing. Per eMarketer, more than 75% of internet users worldwide said they were willing to share their email address, brand interest, and name in exchange for personalized experiences. Without accurate data, marketers won’t be able to provide the level of personalization that consumers desire. Validation can help advertisers evaluate third party data and help build trust across the ecosystem. Companies like Truthset review and provide an unbiased evaluation of data fidelity and quality on a regular basis. "As cookies and mobile ad identifiers continue to phase out, consented, durable identifiers (hashed email, postal addresses) are going to serve as the foundation for identity solutions of the future,” said Chip Russo, President at Truthset. “And the only way to ensure you are transacting on the highest quality identity and demography data is to actively validate the data you rely on with a third party.” Not all data is created equal: Experian leads the way In Q3 2023 Truthset reviewed Experian’s marketing data – as well as several other large data providers – and found: Experian is the #1 data provider in terms of largest volume of high-accuracy hashed e-mails (HEMs) with demographic data Experian ranks #1 in accuracy for 15 marketing data attributes, including but not limited to Age, Gender, Home Owner/Renter, Geography, Education, Presence of Children, and Pet Owner Experian consistently has the largest number of HEMs with demographic data that are 90% or more likely to be accurate “As a member of the Truthset Data Collective, Experian received top ranks across a variety of categories for its data,” continued Russo. “The entire digital advertising world runs on data, but focusing on data accuracy is going to drive the next phase of innovation for the industry, enhancing ROI for advertisers, CPMs for publishers, and relevant experiences for consumers.” As Truthset's recent study highlights, the data matched between hashed e-mails and postal addresses is crucial, underpinning everything from targeted ads to TV audience measurement. Highly accurate HEMs linked to high-quality demographic data should be the foundation of any marketing plan. Advertisers are able to overcome the complexities of identity resolution by tying online and offline touchpoints together to deliver a consistent message across channels. Companies are striving to eliminate marketing waste and provide consumers with personalized marketing and the advertising industry can have confidence that Experian’s marketing data has been externally validated as being highly accurate. The accuracy of our data will power smarter marketing initiatives, like insights, targeting, identity, and measurement. Let's start a conversation about how we can fully realize the potential of data-driven advertising together. Contact us today Latest posts
Programmatic TV can be an inexpensive option. Some platforms can offer a discounted path to prime-time ad spots on major networks.