Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
For as long as the ad buying process has existed, most brands and agencies have put an emphasis on the channel – meaning there were specific campaigns for direct mail, email, TV, social media, banner ads, etc. In fact, the teams responsible for these campaigns often work in silos. But with more people consuming information through multiple channels, it’s important for brands and agencies to put the customer at the center of the ad buying process – to develop and implement true omnichannel campaigns. I recently wrote a byline article for Broadcasting & Cable that explored the concept of the “PeopleFronts.” While the Upfronts and Newfronts have dominated the ad buying world, brands and agencies need place larger emphasis on the customer. At the end of the day, the right mindset can open the door for more powerful campaigns and relevant messages that resonate with the consumer.
As summer fades, marketers are gearing up for another campaign cycle. It’s a process that repeats itself annually, but we can’t just copy-and-paste our plans. With each passing year, the media landscape changes drastically, as do the behaviors of the audiences we are trying to reach. As ever, marketers have to be strategic—and nimble—to reach the right customers at the right time, with messaging central to seasonal events and personal preferences. Marketers can ensure their messaging reaches the right customers with audience optimization. Reach target audiences this season It can be a hassle to create custom audience segments and bespoke creative messaging every time the seasons change, but now, more than ever, we must ensure brand campaigns are as timely, relevant and personalized as possible. In a world of multitasking and multiscreening, there’s an expectation among consumers that all communications they receive are relevant to them—especially from brands. This is why it’s critical to understand your audiences and how to engage them through the most effective channels. To help marketers win the battle for consumer attention—and sales—4C developed the Scope platform. This self-serve software arms brands with powerful tools for managing audiences and optimizing campaigns across channels including TV and digital. So, whether it’s building an efficient media plan, buying targeted ads, or measuring business outcomes, audience optimization is truly in scope. Deliver audience-based marketing messages across the TV and video space Recently, 4C teamed up with Experian to expand our audience marketplace across linear TV, OTT and social media. Brands using the Scope by 4C™ platform can leverage Experian data across a variety of planning and buying use cases, including audience-based linear TV planning and programmatic scatter buying; OTT campaigns across FreeWheel, Telaria, and SpotX; and social advertising on Facebook, Twitter, and Pinterest. Scope’s TV Planner allows marketers to combine historical cost and ad occurrence data with Experian audiences to create customized TV plans in minutes. The outputs go beyond GRPs to maximize in-target impressions for a secondary audience as well as indexing high against the primary demo. With audience-based TV planning brands can truly maximize their upfront buys and use the fantastic reach of linear television for seasonal performance marketing, not just brand awareness. OTT harnesses the big-screen, living-room impact of TV with the targeting precision and flexibility of digital. By using Experian segments to create OTT audiences in Scope, brands can really focus on creative strategy, using the immersive power of video to drive specific business outcomes. From a social perspective, we can combine the pinpoint targeting marketers have come to rely on from platforms like Facebook with advanced segmentation enabled by Experian. The output is high-performing audiences that can be reached at scale with dynamic creative to achieve unparalleled ROI. Focus marketing strategies on audience optimization this season Leveraging customized audiences across channels is the modern approach to marketing and has completely shifted the way marketers target consumers. With the relationship between 4C and Experian, there is now a better way for marketers to identify the most valuable potential customers, uncover the most appropriate messaging, and execute campaigns across the most engaging channels – during peak seasonal campaigns and every single day. Get started and contact us today!
With Tapad, part of Experian, technology, AdsWizz AudioMatic is the first Audio buying platform to offer cross-device identity resolution across the U.S. and EMEA NEW YORK and LONDON, July 17, 2019 /PRNewswire/ — Tapad, part of Experian and a global leader in digital identity resolution, today announced a new joint capability with AdsWizz , the leading technology provider for digital audio advertising solutions. The partnership combines Tapad's digital cross-device technology with AdsWizz's AudioMatic buying platform, enabling the ability to connect audio ad experiences across screens. AudioMatic, AdsWizz's audio-centric buying platform, supports programmatic audio buying and entirely new audio ad experiences for listeners. The integration of The Tapad Graph onto its platform enables new opportunities for marketers to reach, engage and measure each interaction with their desired consumers on digital radio and podcasts channels, and across devices. This partnership makes AdsWizz the first audio buying platform to offer this enhanced cross-device identity capability in the US and EMEA markets. "Marketers need privacy-safe digital identity resolution to reach their consumers," says Tom Rolph, VP of EMEA at Tapad. "With audio becoming an increasingly powerful medium for engagement, it's important that our technology extends to this channel, which is why we are excited to announce our integration with AdsWizz's AudioMatic platform." Digital audio is experiencing high growth, with 84% of advertisers and agencies saying it will play a bigger role in their media plans in the future. Today, 60% of digital audio is consumed via a mobile device.* The Tapad Graph is the largest digital identity resolution graph with differentiated global scale. The partnership enables audio advertisers to leverage The Tapad Graph for enhanced attribution, analytics, and targeting. Alexis van der Wyer, CEO at AdsWizz, added, "Digital audio is increasingly becoming ubiquitous in our media consumption and in our daily digital interactions, and because of that, audio advertising offers tremendous opportunity to personally interact with consumers in every moment of their daily lives. By integrating with Tapad, we enable our advertising partners to increase the effectiveness and the relevance of their marketing messages across audio channels." To learn more about Tapad and our digital identity resolution products, visit our identity solutions page. *Digital Audio Exchange, "The Rise of Digital Audio Advertising," https://thisisdax.com/wp-content/uploads/2019/07/DAX-Whitepaper.pdf Contact us today! About Tapad Tapad, Inc. is a global leader in digital identity resolution. The Tapad Graph, and its related solutions, provide a transparent, privacy-safe approach connecting brands to consumers through their devices globally. Our one-of-a-kind Graph Select offering enables marketers the flexibility and freedom of choice to correlate devices to varied objectives, driving campaign effectiveness and business results. Tapad is recognized across the industry for its product innovation, workplace culture and talent, and has earned numerous awards including One World Identity's 2019 Top 100 Influencers in Identity Award. Headquartered in New York, Tapad also has offices in Chicago, London, Oslo, Singapore and Tokyo. About AdsWizz: AdsWizz has created the end-to-end technology platform that is powering the digital audio advertising ecosystem. AdsWizz powers well-known music platforms, podcasts and broadcasting groups worldwide with a comprehensive digital audio software suite of solutions that connect audio publishers to the advertising community. From dynamic ad insertion to advanced programmatic platforms to innovative new audio formats, AdsWizz efficiently connects buyers and sellers in digital audio. AdsWizz is headquartered in San Mateo, California, with an IT Development hub in Bucharest, Romania, and presence in 39 markets around the world. About AudioMatic: AdsWizz Demand Side, audio-centric DSP and audio buying platform, AudioMatic, enables programmatic audio buying and entirely new audio ad experiences that are proven to be more engaging and more effective, and have delivered measurable results for agencies and their brands all over the world. All the biggest ad agencies have used our programmatic trading platform, including Omnicom, GroupM, Havas, Publicis, Mobext, and more.