Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
The Tapad Device Graph™ Complements Freckle’s IoT Capabilities to Extend Scale and Precision of Audience Data New York, NY — December 6, 2017 — Tapad, part of Experian, is the leader in cross-device marketing technology and Freckle IoT, the global leader in multi-touch, offline attribution, today announced they are partnering to provide brands with a holistic and insightful view of their customers, in predefined locations in all global markets. Starting today Freckle IoT will be leveraging the Tapad Device Graph™ to supplement the company’s data set to offer brands more granular attribution data. Consumer’s online behavior is becoming more and more complex, with the average consumer owning three or more devices and 35 percent of consumers converting on a different device from the one on which they started their research. These interactions become even more complicated when considering how online interactions and media impact offline sales. The collaboration between Tapad and Freckle, which combines Freckle IoT’s persistent location data with Tapad’s proprietary cross-device technology, is an important step in empowering brands with the information they need to better understand how digital media, consumed across multiple devices, is impacting offline attribution. Using its opt-in, first-party data, Freckle IoT helps brands measure the effectiveness of their advertising by independently matching media spend to in-store visits. Tapad’s technology extends Freckle’s data-set by allowing brands to access additional deterministic and probabilistic data, at scale and across all devices, to analyze consumer behavior ahead of in-store purchase. “Combining our technology with Tapad’s identity-driven solutions was a natural fit for our business,” said Neil Sweeney, founder and CEO at Freckle IoT. “With our unbiased, agnostic measurement and Tapad’s precise and privacy-safe data set, we knew this partnership would be a strong complement to providing more effective results for the needs of our brand partners.” “Freckle IoT is a valuable partner for Tapad as our cross-channel attribution capabilities continue to expand at global scale,” says Chris Feo, SVP, strategy and global partnership at Tapad. “Marketers today need a tool that can address the online and offline disconnect throughout the consumer journey. Freckle’s IoT innovations combined with the Tapad Device Graph help address this need by providing brands, across multiple verticals, accurate and precise identity-driven data powered by true consumer behavior — online and offline.” For more information about the Tapad Device Graph™, or to request a demonstration, contact us. For more information on Freckle IoT’s measurement offerings, please visit www.freckleiot.com.
London – 24 November, 2017 – Tapad, part of Experian, is the leader in cross-device marketing technology and continues to broaden its reach across EMEA. The business today reported a 20 percent growth in the scope of its regional device graph, a data set used by organisations to map consumers to their devices, enabling better, more personalised cross-device marketing. This news complements Tapad’s recent expansion of its UK team with the hire of experienced solutions engineer, Davide Rosamilia. As the demand for cross-device technology solutions continues to grow around the globe, coupled with the emergence of regulations such as Europe’s General Data Protection Regulation (GDPR), Tapad is committed to offering suppliers the greatest level of insight without compromising consumer privacy. Since Tapad started licensing its proprietary Tapad Device GraphTM just over a year ago, demand for the company’s technology has experienced significant growth. New supply partnerships and proactive data sourcing have also meant an increase in devices across key markets, which contribute to the overall 20 percent growth of the EMEA device graph, including a 44 percent increase in the U.K., 47 percent in France, and 85 percent in Germany. “We’re continuing to invest heavily in growing our regional device graph, allowing us to better meet the needs of EMEA marketers as they strive to reach individuals with greater precision in some of the most tightly regulated marketplaces worldwide,” said Tom Rolph, VP EMEA, Tapad. “This year, we have also welcomed 10 new data suppliers whom we’ve helped to increase cross-device amplification, attribution and audience extension, helping to further set us apart in the marketplace and successfully expand our EMEA presence.” Available around the world, the Device Graph provides access to Tapad’s globally compliant and privacy-safe datasets across EMEA, APAC and the U.S., and offers deeper knowledge of consumer preferences, purchase intent, and conversion behaviors. “Tapad has shown a unique ability to adapt to the nuances of the local EMEA market and display impressive growth without sacrificing dedication to privacy,” said Alistair Hill, CEO and Co-founder at On Device Research. “When we started vetting technology vendors, we needed to be sure that we selected a partner that could offer compliant and privacy-safe datasets to operate within our stringent data standards. Tapad’s probabilistic solution offered us greater scale, greater device reach, and increased engagement without compromising on privacy.” For information more about the Tapad Device Graph™, or to request a demo, contact us today. Get started with us
The Tapad Device Graph™ Will Expand Sizmek’s Cross-Device Reach and Improve the Efficiency and Precision of Digital Advertising NEW YORK, November 16, 2017 — Tapad, part of Experian and a leader in cross-device marketing technology, today announced a new global partnership with Sizmek, the largest independent buy-side advertising platform delivering impressions that inspire. By integrating the Tapad Device Graph™, Sizmek will enhance its AI-powered predictive capabilities to deliver accurate, cross-device messaging at global scale in a privacy-safe environment. Combined with Sizmek’s existing data enablement, creative optimization and media execution capabilities, the proprietary Tapad Device Graph improves the efficiency and precision of digital advertising by accurately matching people and devices. This enables advertisers to get a clear view of individual customer journeys, achieve scale without compromising on efficiency, and uncover new opportunities for conversion. Sizmek’s customers will have access to Tapad’s globally compliant and privacy-safe datasets across the Americas, EMEA, and APAC. With deeper knowledge of consumer preferences, purchase intent and conversion behaviors, Sizmek and its customers are able to enhance advertising strategies including cross-device audience identification and more. “Tapad is known for their strong cross-device capabilities, and their offering is an excellent addition to our growing program for best-of-breed data and measurement partners" says Mike Caprio, Sizmek’s Chief Growth Officer. “For our customers, this partnership will add further people-based marketing precision and reach to our comprehensive offerings around creative optimization, data enablement and media execution." “Sizmek’s adoption of industry-leading AI and machine learning campaigns will be a great complement for the Device Graph,” said Chris Feo, SVP, strategy & global partnerships at Tapad. “Our ability to create smaller, more customized segments in conjunction with Sizmek’s AI modeling will deliver efficiency, effectiveness and increased ROI for marketers worldwide.” This partnership comes at a time of a massive shift in the marketing technology industry. Companies like Tapad and Telenor, as well as Rocket Fuel and Sizmek, are joining forces to adopt those technologies that are most efficient and accurate at reaching consumers at scale in a personalized and non-intrusive way. The combination of Tapad and Sizmek’s offerings will provide international marketers with exceptional resources to lead a more cost effective and results driven campaign. For information more about the Tapad Device Graph™, contact us today. Get started with us