Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
Third-party cookies have been a crucial component in people-based advertising and digital identity. With Google's recent announcement of delaying third-party cookie deprecation to 2024, the industry has more time to rethink how to effectively identify and communicate with consumers when the time comes. Preparing for cookie deprecation Solving for the post-cookie world is mission critical, particularly as consumer expectation for a relevant digital experience is heightened. We’ve seen a number of industry participants, including brands, publishers, data providers and technology platforms, work around the clock to find an alternative to third-party cookies—one that amasses the same scale and reach but also maintains consumer privacy. In fact, industry insights echo that sentiment. According to a white paper from Winterberry Group, Collaborative Data Solutions: The Evolution of Identity in a Privacy-First, Post-Cookie World, sponsored in part by Experian, one of the most frequently heard comments was the urgency for the industry to develop post-cookie, privacy compliant solutions that work in a more integrated manner. And if there was one overarching position regarding the research into the future of identity, it’s that collaboration is key. Participants in the white paper expressed that with the elimination of third-party cookies, there will be a surge in collaborative solutions across and within companies to accommodate changes in the digital marketplace. Collaborative data solutions must move beyond new post-cookie identity replacements and encompass more holistic approaches, including first-party data. First-party data sharing Currently, 64.3 percent of organizations in the US collaborate with other organizations to share first-party data for insights, activation, measurement or attribution, and 16.7 percent in the U.S. have plans to. Virtually all US companies surveyed were aware of the option to collaborate with other organizations and expressed openness to discussions around sharing first-party data. What is the solution to third-party cookie deprecation? The deprecation of third-party cookies is creating a shock in the marketing and advertising world because there has been an over-dependence on one type of identifier. Therefore, the solution to identify consumers across the digital ecosystem will not come from a single replacement for third-party cookies. Instead, it will rely on a combination of solutions, including collaborative data between organizations and implementation of proprietary first-party data strategies, as well as a framework that can connect all these touchpoints together. Experian can help you navigate the cookieless future Experian is focused on building a more effective advertising ecosystem that promotes the interoperability of digital touchpoints while enabling and fostering new innovations in a privacy forward way. Contact us today and get started with building connected identity in the ever-changing data landscape. To learn more, watch the recording of our webinar with The Vitamin Shoppe where we discuss identity and how you can drive more addressable audience strategies amidst diminishing data signals.
As today’s digital landscape gets more and more complicated there are more ways for brands to connect with users and drive purchases and more ways for ad tech to target and measure those touch points. As in-person shopping picks up steam due to the re-normalization of society post-COVID 19; the connection between digital ads and in-person purchases needs to be made once again. With the rise of Connected TV throughout the pandemic there are even more digital opportunities to target a user. But how do you make sure that those brand engagements are captured and correctly attributed to offline purchases and conversions? The answer lies in a holistic identity resolution strategy. Cross-device identity resolution with The Tapad Graph connects the identifiers and devices of individuals within a household to each other; enabling targeting, frequency capping, extension, segmentation and measurement or attribution between devices; including Connected TV and hashed (privacy-protected) email addresses along with Cookies, Mobile Ad Ids and IP Address. Brands can join their first-party data to The Tapad Graph to execute strategies that connect online and offline data for pre, mid and post-campaign efficiencies. Let’s imagine a scenario in which an outdoor retail brand is targeting users watching specific content on a Connected TV device. Powered by identity resolution, they start with a general ad on CTV and continue targeting down individual paths with each user. When one of them converts in store and makes a purchase; the outdoor retailer can connect that action through location and in-store traffic data with the cross-device identity resolution used to execute the digital campaign. Now the actions of the user online and offline are resolved for more accurate measurement and attribution after the campaign ends. But it doesn’t stop there– the brand's CRM data can be reactivated for the next digital campaign and leveraged to capitalize on the most effective media mix for the user who made the purchase previously. These combined insights can be invaluable in shaping up future campaign strategies with geo-contextual ads, recommended additional products and personalization to help drive more conversions and purchases in-store or online. As in-person shopping picks back up and marketers are tasked once again with balancing online and in-store KPIs, the right identity resolution strategy can unlock necessary efficiencies for retailers, ad tech vendors and agencies tasked with supporting these initiatives. Get started with The Tapad Graph For personalized consultation on the value and benefits of The Tapad Graph for your business, email Sales@tapad.com today!
Imagine an experiential self-driving car of the future. You step inside, select where you want to go and the best experience within the vehicle for your journey. Within seconds, it safely sweeps you away and drives you to your destination. If only marketing were that easy. At the tap of a console, you are able to identify the best parachute to glide your ads to the right audience, on the right platform. Well, what seems like a distant dream is Experian Marketing Service’s latest solution: Discovery Platform. To introduce Discovery, we asked Sunaina Chaudhary, Director of Product and Innovation, to describe how the solution facilitates effective marketing strategies. Discover more about your consumers. What is Discovery? What marketing challenges does it address? Anywhere you feel like you need to understand your customers, Discovery Platform can help. Whether you want to take your marketing to the next level or get on the road to recovery, Discovery is the solution. We created the Discovery Platform to help our clients overcome today’s advertising challenges, including gaps in data that impede identity linkage, limited internal resources and fragmented data. Think about all the touchpoints surrounding a customer in real life: connected TV ads, social media, email, flyers, digital ads . . . You can probably think of at least 15 off the top of your head. Discovery brings all those touchpoints together into a unified view of your customer. It combines disparate data insights to help you better understand your customers’ individual journeys and the most impactful touchpoints across offline, social and digital channels. Speaking specifically to a use case, in the most simplistic words, marketers can use Discovery to identify the right consumer, plan to reach them through the most optimal channel and create a consistent, relevant and personalized message. You can even leverage Discovery Platform’s seamless integration with our Audience Engine solution to build and deploy custom audiences to a variety of social, digital, email and Connected TV partners. The sales and other customer data flowing back into Discovery, all ties together for the marketing team to inform the next marketing campaign or strategy. Watch the Discovery Platform demo to learn more. Which business verticals does it benefit? Discovery Platform is apt for almost every vertical that I can think of – retail, agency, connected TV, publishers and financial institutions. Even though agencies don’t typically own first-party data, they can still benefit from Discovery through a one-stop shop for their RFP needs and the ability to activate the same audience with a click of a button. Clear cohorts you can activate—without privacy anxiety. Do marketers need to worry about consumer data privacy in the Discovery platform? No, when you’re in Discovery, you’re seeing the best and safest view of your customer cohorts. Marketers can rely on Experian to meet all compliance, governance and privacy standards. That’s taken care of by the time you see the data. Discovery is built on carefully curated and maintained data on 126 million households and 300 million individuals. You can leverage it for insights on over 2,000 consumer attributes such as demographics, home-owner status, shopping behaviors, media consumption habits and more. These are all tied to a unified identity made possible by our identity linkage. To do this, we help pull together your first-party data—along with whatever Experian datasets you license—to create a complete picture of your customer cohorts. It’s always-on, actionable insights you can subscribe to. What most excites you about the Discovery platform? We live in a world full of subscriptions—from TV streaming to food delivery. Data solutions of the past are transactional: you buy consumer data, leave it, and need to update it next week, month or quarter. Marketers have an ongoing need for more up-to-date data. That’s why we built Discovery Platform. World-class marketers need to be proactive when it comes to their customers and their business, which means having access to always-on actionable insights and analytics. Experian’s Discovery platform is here to make recurring market insights safer to access, and easier to collect and put into action. Here are 3 ways you can put Discovery to work for your marketing strategy: Subscribe! You get data-backed insights when you need them to stay up to date on what's happening with your business, customers and campaigns. For example, through mobile location data you can see which geographic areas of your market are returning to stores or still shopping online, glimpse competitor market share and more. Connect insights to your campaign. Discovery Platform is seamlessly integrated with Audience Engine to turn insights into action. This allows you to engage with your audiences via email, social, display, connected TV or whatever channels they prefer. Request a report. Not ready to subscribe? You can still get valuable on-demand reports, whether you have one or 25 target markets. Tell us your audience selection criteria, pick datasets for rich insights and Experian Marketing Services will give you actionable marketing insights for your business. Sign up for our newsletter to receive quarterly updates on what’s new at Experian Marketing Services.