Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
NEW YORK, Oct. 24, 2019 /PRNewswire/ — Tapad, part of Experian and a global leader in digital identity resolution, today announced a new partnership with Retargetly, a leading independent full stack data company. The partnership combines Tapad's cross-device identity resolution technology with Retargetly's robust data toolset, allowing brands and agencies using Retargetly's platform to seamlessly access an expanded audience across devices, without compromising precision. In addition to reach expansion, Tapad's global, privacy-safe digital cross-device solution, The Tapad Graph, enables Retargetly's brand and agency clients a more holistic digital customer journey analysis, and efficient campaign capabilities like frequency capping and online attribution. At the same time, Tapad will be able to extend its presence into the LATAM region, tapping into Retargetly's existing regional footprint. "Combining The Tapad Graph's technology with Retargetly's platform will enable customers to make holistic, data-driven decisions that increase the ROI of their campaigns," said Chris Feo, SVP of Global Data Licensing and Strategic Partnerships at Tapad. "We can now offer advertisers the value of both technologies to optimize their marketing initiatives across the globe by creating seamless experiences across multiple devices and channels." Understanding a consumer's cross-device journey is a marketing necessity. A recent study showed that 75% of consumers expect a consistent experience from brands1. With the number of devices per individual rapidly increasing, digital identity resolution becomes essential to create that streamlined experience consumers crave. "Similarly to Tapad, our goal is to offer marketers a suite of products that can increase the ROI of their campaigns," said Juan Amuchastegui, Head of Product at Retargetly. "In order to achieve this, marketers need digital cross-device identity resolution to gain attribution, acquisition and reach expansion capabilities. We chose Tapad as our partner because The Tapad Graph has differentiated global scale, and privacy-safe measures, which we knew would benefit our clients' campaigns." Santi Darmandrail, Managing Director at Retargetly added, "Across the Americas our clients choose to work with us because of our scale, our precision, and our unique approach to what data can do to transform business outcomes. In that scenario, partnering with Tapad and integrating The Tapad Graph onto our platform was really a no-brainer and we are beyond excited to be making that available for our more than 700 clients across the region." To learn more about Tapad and our digital identity resolution products, visit our identity solutions page. Contact us today! About Tapad Tapad, Inc. is a global leader in digital identity resolution. The Tapad Graph, and its related solutions, provide a transparent, privacy-safe approach connecting brands to consumers through their devices globally. Tapad is recognized across the industry for its product innovation, workplace culture and talent, and has earned numerous awards including One World Identity's 2019 Top 100 Influencers in Identity Award. Headquartered in New York, Tapad also has offices in Chicago, Denver, London, Oslo, Singapore and Tokyo. About Retargetly: Retargetly is the leading independent data solution from Latam. Their proprietary platform processes over 25 billion data events a month and transforms them into actionable analytics that drive business results across the board. The recently launched Retargetly Audience Platform (RAM) is the number one data exchange in Latin America, with over 1000 active buyers and millions of dollars traded every year. Regargetly provides services across Latam and has offices in Buenos Aires, Mexico City, São Paulo and New York. For more information, visit www.retargetly.com
NEW YORK, Oct. 16, 2019 /PRNewswire/ — Tapad, part of Experian and a global leader in digital identity resolution, and The Trade Desk, a global advertising technology leader, partnered to integrate The Trade Desk's unified ID solution in April 2019. The Trade Desk's unified ID solution's objective is to serve as a standardized cookie ID to help marketers reach more of their audience on the open internet. After an initial six month period, Tapad reports significant adoption rates and enhanced customer results since their joint integration in April. As a result of the partnership, client brands, agencies, DMPs/ DSPs, Data Providers, Mobile Networks and Measurement/Analytics Providers, saw increased match rates up to 38% and more global coverage without compromising precision. With this combined offering, Tapad's global, privacy-safe digital cross-device solution, The Tapad Graph, connects brands with consumers over 4 billion devices globally. "There is a need for digital identity solutions outside the walled gardens that can accommodate the need for both precision and scale," said Chris Feo, SVP of Strategy and Global Partnerships at Tapad. "Through our partnership with The Trade Desk, we are empowering companies to have a comparable digital identity resolution across the open web as compared to the walled garden environments." Over 25 companies who license The Tapad Graph, such as Annalect, Semasio, Retargetly, and ThinkCX, have also included The Trade Desk's unified ID solution as a key identifier in their graph output. "The vast improvement in scale that Tapad has seen illustrates the value digital identity resolution products can bring for brands," said Nate Gawel, General Manager of Data Partnerships at The Trade Desk. "We're looking forward to continuing work with Tapad to prove that the open internet can deliver the very same benefits many reserve for large platforms." Adoption of the unified ID solution allows all parties across the supply chain (SSPs, DSPs, DMPs and data providers) to utilize The Trade Desk's cookie footprint to increase their own cookie coverage across the global independent internet. For more information, please visit The Trade Desk's unified ID solution site, or https://www.experian.com/marketing/consumer-sync to learn more about Tapad's digital identity resolution products. About Tapad:Tapad, Inc. is a global leader in digital identity resolution. The Tapad Graph, and its related solutions, provide a transparent, privacy-safe approach connecting brands to consumers through their devices globally. Our one-of-a-kind Graph Select offering enables marketers the flexibility and freedom of choice to correlate devices to varied objectives, driving campaign effectiveness and business results. Tapad is recognized across the industry for its product innovation, workplace culture and talent, and has earned numerous awards including One World Identity's 2019 Top 100 Influencers in Identity Award. Headquartered in New York, Tapad also has offices in Chicago, London, Oslo, Singapore and Tokyo. About The Trade Desk:The Trade Desk™ is a technology company that empowers buyers of advertising. Through its self-service, cloud-based platform, ad buyers can create, manage, and optimize digital advertising campaigns across ad formats and devices. Integrations with major data, inventory, and publisher partners ensure maximum reach and decisioning capabilities, and enterprise APIs enable custom development on top of the platform. Headquartered in Ventura, CA, The Trade Desk has offices across North America, Europe, and Asia Pacific. To learn more, visit thetradedesk.com or follow us on Facebook, Twitter, LinkedIn and YouTube. Contact us today!
What generation already has 68 million consumers, is set to be the largest generation ever, and $360 billion of disposable income? While you may think these attributes describe millennials, they are actually a portrait of Generation Z, better known as Gen Z, the newest generation that is emerging in the marketplace. Gen Z is beginning to make an impact worthy of focusing your next auto marketing campaign around. Gen Z and the automotive market Made up of consumers born after 1996, Gen Z is ready to be noticed and become a force to be reckoned with in the market. In the automotive market alone, Gen Z made up 3.8 percent of all new vehicle registrations in the first quarter of 2019. While that number may seem small, consider the fact that in 2015—just four years ago—they only made up 0.5 percent of new vehicle registrations. These are statistics that should make automotive marketers pay attention. Digital consumption of Gen Z Most marketers tend to lump Gen Z with millennials – after all, they grew up with smartphones and social media, so how different can they be than the generation that came of age with the Internet? However, unlike millennials, Gen Z is considered a true “digital generation” – performing many of life’s day-to-day activities online. This means that they do a lot of research when shopping for a product. In fact, according to the Center for Generational Kinetics, 52 percent of Gen Z has looked at online reviews for a product while shopping in-store. But how do digitally native consumers impact automotive marketers? In order to sell cars, marketers’ messages need to be relevant. Like many other generations, Gen Z interacts with brands across a number of different devices and touchpoints. They’re constantly bombarded with messages and advertisements, so much so that it becomes information overload. Auto marketing to Gen Z To create consistent messages that resonate, brands need to communicate across these different touchpoints and tell a story that is relevant to your audience. For example, you wouldn’t show an advertisement of someone buying their dream sports car to a member of Gen Z. Most of these consumers are buying their first car, so it would typically make more sense to show them ads for economical, reliable, sedans or cross-over SUVs. Historically, automotive marketers have relied exclusively on CRM data, but this strategy isn’t effective when it comes to Gen Z, the fact of the matter is that they probably haven’t purchased a car from you previously. Identity resolution and Gen Z auto marketing The recipe for marketing success with Gen Z is identity resolution – combining your first-party identity signals across channels with third-party resources, as well as advanced technology, such as machine learning and artificial intelligence, to truly create and deliver campaigns that are relevant to the youngest generation. The more knowledge marketers have on your audience, such as demographics, life events and purchase behavior, enables them to tailor the messages to the audience in a way that will cut through the noise and resonate. As more members of Gen Z come into the marketplace, automotive marketers will want to ensure they’re meeting them where they are, delivering messages that matter to them. This will help marketers not only sell more cars, but also begin to create relationships that could last for years to come. Your identity resolution partner Experian is here to help you create an identity resolution strategy that will take your automotive marketing campaigns to the next level. We help brands put real people at the center of their business by resolving fragmented identity signals. Deliver personalized, relevant messages across channels to effectively target your ideal customers. Get started with identity resolution today!