Effective Security & Compliance Insights

Get practical, no-fluff advice for building a security program that wins deals and reduces risk.

Want practical security templates, checklists, and expert tips delivered to your inbox?

Featured Insights

ISO 27001 A.8.20: Network Security

ISO 27001 A.8.20 requires that the networks carrying an organization's information are secured, managed, and controlled to protect the systems and ...

Filter by Tag

Flat 2D illustration of an IT professional managing organized on-premise infrastructure. Servers, firewalls, switches, storage systems, and management cards are arranged in tiers with patch status icons, showing a calm, repeatable security and maintenance process.

SOC 2 Patch Management for On-Prem Servers and Network Devices

TL;DR

  • Patching is a three-criteria activity in SOC 2: CC8.1 has a Point of Focus literally called Manages Patch Changes, with CC6.8 covering...