Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
Tapad's integration with Knorex's XPO™ platform will complement cross-channel optimization capabilities for brands and agencies in the U.S. and APAC markets NEW YORK and SINGAPORE, Dec. 10, 2019 /PRNewswire/ — Tapad, part of Experian and a global leader in digital identity resolution, has partnered with Knorex, a leading provider of digital performance marketing. Knorex's self-service online advertising platform, Knorex XPO™, enables marketers to advertise globally in real-time across different media channels, formats, platforms and devices. Tapad's global, privacy-safe digital cross-device solution, The Tapad Graph, will compliment Knorex XPO™'s own device data set for enhanced marketing capabilities. For Knorex, the integration enables their brand direct and agency customers to gain a more accurate understanding of consumers across devices to reduce campaign inefficiencies and duplication, and to effectively manage frequency capping and attribution. Abhishek Kumar, VP of Engineering at Knorex commented, "Today's digital consumer is raising the bar for marketers. With increasing marketing complexities and consumer device usage, this integration enables marketers to understand the consumer decision journey with heightened ease. Our combined offering will empower agencies in the APAC and US markets, providing an improved marketing solution that will help to streamline their efforts." Abhay Doshi, Head of APAC at Tapad added: "The Tapad Graph, when integrated with the Knorex XPO platform, should not only help U.S. and APAC marketers optimize campaign performance through cross device marketing – but also increase the opportunity for brands to reach out to their target customers within a desired time." To learn more about Tapad and our digital identity resolution capabilities, visit https://www.experian.com/marketing/consumer-sync About TapadTapad, Inc. is a global leader in digital identity resolution. The Tapad Graph and its related solutions provide a transparent, privacy-safe approach connecting brands to consumers through their devices globally. Tapad is recognized across the industry for its product innovation, workplace culture, and talent, and has earned numerous awards including One World Identity's 2019 Top 100 Influencers in Identity Award. Headquartered in New York, Tapad also has offices in Chicago, London, Oslo, Singapore, and Tokyo. About KnorexKnorex provides programmatic advertising products and technologies to advertising buyers worldwide. With its cloud-based online advertising platform, Knorex XPO™ enables ad buyers to self-serve and advertise real-time across the globe regardless of the media channels (social, search, OTT/CTV, video, web/mobile etc.), ad formats (display, native, search, social, video etc) and devices (desktop, laptop, smartphones and tablets) to deliver personalized marketing messages to the target audience in an automated way, powered by machine learning/AI. Underpinned by a multi-layered data-driven approach, XPO simplifies the execution and optimization of marketing campaigns, while delivering measurable and attributable performance. Contact us today!
Tapad, now part of Experian, technology now powers Lifesight's real world intelligence platform with cross-device and reach expansion in the Asia Pacific Region SINGAPORE, Nov. 20, 2019 /PRNewswire/ — Tapad, part of Experian and a global leader in digital identity resolution, today announced a new partnership with Lifesight, a leading provider of real world intelligence for advertisers in the Asia Pacific region (APAC). With the combined offering of The Tapad Graph, Tapad's global, privacy-safe digital cross-device solution, and Lifesight's real world intelligence platform, brands and agencies across APAC can benefit from better consumer targeting, expanded reach for targeted audiences and web-to-mobile footfall attribution. Through this multi-layered offering, Lifesight's brand and agency partners can access an omnichannel view of consumers' paths to purchase, thereby enabling them to increase the reach, measurability and ROI of their advertising campaigns. Rohit Maheswaran, Co-founder of Lifesight commented, "The consumer journey is getting increasingly more complex with ever changing digital and physical world behaviours, making it difficult for marketers to make strategic marketing spend decisions. That's why it's our mission at Lifesight to empower the brands and agencies within the APAC market to achieve better targeting and measurement capabilities, and our partnership with Tapad will help further this cause." Abhay Doshi, Head of APAC at Tapad added, "The Tapad Graph, which enables a unified view of consumers across their multiple digital devices, has a reach of 1 billion devices across the APAC market today. Paired with Lifesight's consumer insights of more than 500 million unique devices, this valuable partnership will offer the market extended consumer reach and prove beneficial to brands and advertisers across APAC who have historically struggled with resolving attribution." To learn more about Tapad and our digital identity resolution capabilities, visit www.experian.com/marketing/consumer-sync About Tapad Tapad, Inc. is a global leader in digital identity resolution. The Tapad Graph, and its related solutions, provide a transparent, privacy-safe approach connecting brands to consumers through their devices globally. Our one-of-a-kind Graph Select offering enables marketers the flexibility and freedom of choice to correlate devices to varied objectives, driving campaign effectiveness and business results. Tapad is recognized across the industry for its product innovation, workplace culture and talent, and has earned numerous awards including One World Identity's 2019 Top 100 Influencers in Identity Award. Headquartered in New York, Tapad also has offices in Chicago, London, Oslo, Singapore and Tokyo. About Lifesight: Lifesight is Asia's leading real world intelligence company that helps marketers understand, target, and measure consumers based on their real world behaviour. Lifesight's robust platform and data solutions power business decisioning, audience activation, footfall measurement, and in-depth location analytics for leading brands and enterprises. The company is headquartered in Singapore with a rapidly expanding footprint in the Asia Pacific region operating in India, Malaysia, Indonesia, UAE, Saudi Arabia, Thailand, Philippines, Vietnam, Japan, Australia and New Zealand. To learn more, visit https://www.lifesight.io/ Contact us today!
The world of healthcare is often left to the doctors, surgeons and scientists. They examine our bodies, organs and genetics, determining if we are healthy and advising accordingly if we are not. This trust is well-warranted, as they spend years studying and practicing to ensure their patients receive the best care possible. However, individual health status is far more complicated than that, and cannot only be restricted to biology and chemistry. There are other factors that impact our well-being that must be accounted for in order to form a comprehensive picture of our necessary healthcare. Social Determinants of Health (or SDOH) are the conditions in which people are born, grow, live, work and age that shape our everyday health. They include socioeconomic factors such as education, neighborhood and housing, employment, social support networks and accessible transportation, among others. While not directly related to our clinical health, they still account for, and influence, many of our health outcomes. Take an elderly man proudly living alone in small town USA. Managing his diabetes is increasingly challenging. He had to give up his car eight months ago, so getting to his regular medical check-ups is a struggle. Without ongoing preventative care and maintenance, this gentleman will end up in the ER with possibly life-threatening conditions. If his physician can detect the change in his access to transportation, they can connect this patient to an eldercare transportation provider, enabling ongoing preventative care and thus avoiding costly emergency visits to the hospital. Access to transportation, healthier food, higher education and even parks can be a lifesaving factor in certain scenarios. This means that healthcare companies cannot rely solely on clinical or claims data if they wish to provide the best and most impactful care planning for their patients. They must take everything into account, from education to lifestyle to neighborhood. By looking at all available data, healthcare providers are able to get a more holistic view of the consumer and drive care plans that deliver better outcomes. Unfortunately, much of this data is fragmented and scattered, making it difficult to compare data points and group patients together in meaningful and efficient ways. Experian’s robust data and analytics is used to create more than risk scores – provide the right amount of intelligence in a digestible way to the care teams and clinicians that work with these patients every day. It provides relevant actionable insight into what drives a non-clinical cap in care, allowing healthcare organizations to make unprecedented, personalized adjustments to how they engage with patients’ in a privacy and HIPAA compliant manner. To learn how your healthcare organization can improve health outcomes and patient engagement using Experian data, visit https://www.experian.com/healthcare/solutions/patient-care-management-solutions/social-determinants-health.