Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
School may be out for the summer, but this is the perfect time for marketers to begin back-to-school planning. Follow these five simple tips and be on your way to back-to-school success. Searchers are actively seeking out ideas around clothes, hairstyles and dorm room décor as they prepare for the school year to start. Leverage sites like Pinterest to promote back to school merchandise and content. Don’t forget to include DIY and customization options as these appeal to today’s students. Don’t underestimate the influence of moms and college students. These consumers are more likely to actively search for the best deals online so test using deal-seeking terms like “free” and “sales” in promotional campaigns. In 2013, Marketers experienced a 35 percent lift in unique clicks when they used the word ‘college’ in the subject line. This year, try targeting specific ages for back-to-school by including terms like “college” and kids” in the subject line. Timing of back-to-school campaigns matters. While August is the key month for back-to-school campaigns, there may be more opportunity to mail additional campaigns for school supplies in July, and clothing and accessories in early September. Don’t forget to personalize! Last year, we saw a 44 percent increase in unique open rates for emails that contained personalization in the subject line. These tactics should be included in a strong back-to-school mailing program. For more information on back-to-school planning, download the 5 Lessons for Back-to-school Marketers in 2014 report.
Experian Marketing Services conducted an analysis into the attitudes, language preferences, spending habits and media behaviors of Hispanic Consumers, some of which were featured in the 2014 Hispanic Market Overview presented by López Negrete Communications. This post highlights findings from that analysis, which focus on Hispanic consumers’ adoption and use of smartphones. Hispanic consumers, who today account for 15 percent of the total U.S. adult population and 22 percent of Millennials, represent an ideal audience for mobile engagement and mobile advertising. While cell phone ownership rates among Hispanic and non-Hispanic adults are equal, Hispanics are more likely to own a smartphone and use it as their primary device to connect to the Internet. According to the latest estimates from Experian Marketing Services, 63 percent of Hispanic adults own a smartphone versus 60 percent of non-Hispanics. That’s up from 52 percent and 51 percent, respectively, since 2012. Among smartphone owners, Hispanics are 17 percent more likely than non-Hispanics to say that they access the Internet more through their phone than through a computer. In fact, 45 percent of Hispanic smartphone owners are mobile-dominant when it comes to going online compared with 38 percent of non-Hispanics. Marketers courting the influential Hispanic consumer must consider this fact and take a mobile-first approach to ensure that online marketing efforts, including everything from email to websites to e-commerce, are designed to engage the customer as effectively on a mobile device as on a computer. Even traditional marketing tactics such as television ads should reflect the growing likelihood that Hispanics have a smartphone either nearby or physically in their hand and are ready to engage. In fact, 37 percent of all Hispanic adults say that they often use their cell phone while watching television compared with 29 percent of non-Hispanics. Among smartphone owners, the share of Hispanics who use their phone while watching television shoots up to 50 percent versus 42 percent of non-Hispanics. Millennial smartphone owners are among the most likely to be splitting their attention between the big and small screen with 61 percent of Hispanic Millennials and 58 percent of non-Hispanic Millennials doing so. Knowing what specific mobile activities Hispanics are engaging in is critical for marketers in identifying the best tactics for reaching them via mobile. The chart below shows that Hispanics engage in most smartphone activities at above average rates, but they are much more likely than non-Hispanics to IM/chat on their phone. As a result they are slightly less likely than non-Hispanics to email from their phone, though the vast majority of Hispanic smartphone owners still use mobile email. Other activities that marketers will find Hispanics engaging in at above average rates include watching videos, using mobile GPS and listening to music. Learn more about how Experian Marketing Services can help your organization more effectively target, reach and engage today’s Hispanic consumer.
Published in MediaPost With the explosion of smartphones and digital tablets and the steady rise of Internet-connected televisions, gaming consoles, and more, consumers are increasingly watching online video when and where they want. New research from Experian Marketing Services on cross-device video found that as of October 2013, 48% of all U.S. adults and 67% of those under the age of 35 watched online video during a typical week, up from 45% and 64%, respectively, just six months earlier. At the same time, the share of households considered “cord-cutters” — those with high speed Internet but no cable or satellite TV — is on the rise, and that has a real impact on marketers and on the medium of television, the recipient of the largest share of advertising dollars. While the growing trend in cord-cutting is understandably disturbing to cable and satellite companies and disruptive to the television advertising revenue model overall, the growth in online viewing creates opportunities for marketers. Online video viewers can be more easily targeted and served up advertising that is more relevant, responsive and measureable. Marketers can also be more confident that their online ad was actually seen given that viewers are typically unable to skip ads. And while CPMs for online video ads may generally be lower than those of TV, marketers can use that savings to negotiate costs based on clicks or transactions rather than impressions, giving them a better picture into audience interest and insights to inform their budget allocation. Expect “Cutting the cord” to continue Today, over 7.6 million U.S. homes or 6.5% of households are cord-cutters, up from 5.1 million in 2010 or 4.5% of households. One thing enabling consumers to cut the cord is the rise in Internet-connected TVs, which allows viewing of Internet video on demand without sacrificing screen size. In fact, a third of adults (34%) now have at least one TV in the home that is connected to the Internet either directly or through a separate device like an Apple TV or Roku, up from 25% in 2012. With the launch of devices like Google’s Chromecast and the Amazon Fire TV, those numbers are sure to rise even more in the months and years ahead. Cord-cutters like the bigger screen Our analysis found that the act of watching streaming or downloaded video on any device is connected to higher rates of cord-cutting but the act of watching on a television is the most highly correlated. In fact, adults who watch online video on a television are 3.2 times more likely than average to be cord-cutters. Those who watch video on their phone (the device identified in the analysis as that most commonly used for watching online video) are just 50% more likely to be cord-cutters. Millennials are more likely to be cord-cutters We found that households with an adult under the age of 35 are almost twice as likely to be cord-cutters. Throw a Netflix or Hulu account into the mix and the rate of cord-cutting among young adult households jumps to nearly one-in-four. Given these surprising stats, many Millennials may be cord-cutters without ever having “cut” a cord. And that’s an important trend to watch since it means a significant portion of this generation will never pay for TV. Millennials are also the most device-agnostic, with over a third saying they don’t mind watching video on a portable device even if it means a smaller screen. That’s more than double the rate of those ages 35 and older. This decentralized viewing can create headaches for marketers who need to start a relationship with Millennials during this stage of their lives when they’re most open to trying out new brands and have yet to settle down. On the plus side, marketers who do manage to reach this audience will find them much more open to advertising than average. In fact, Millennials are more than four times more likely to say that video ads that they view on their cell phone are useful. So while the challenge is big, so is the potential reward.