Resources
Events at Johanson Group
Webinars, workshops, and industry events on compliance and security.
Services
SOC & Attestation
ISO Standards
Privacy & Data Protection
Government & Industry
Essential Knowledge: SOC 2 Compliance Requirements
What is a SOC 2 Attestation?
Your Pre-Audit Checklist for SOC 2 Compliance
The Benefits of SOC 2 Compliance
SOC 2 Controls: What they are and how they help you stay compliant
The History of SOC 2 Compliance
IT Audit Checks: What You Need To Know
An Overview of a HIPAA Attestation of Compliance
SOC 2 vs. ISO 27001: Which to Choose
7 Things To Look For In A SOC 2 Auditor
SOC 2 Frequency: What You Should Know
Why SOC 2 Auditing Is Essential for SaaS Businesses
Why You Need a Cybersecurity Risk Management Policy, How to Write One—and Who Can Help
Choosing the Right Compliance Framework for Your Business: NIST vs ISO
Exploring the Five Trust Service Principles of SOC 2 Compliance
3 Essential Steps for Choosing the Right SOC 2 Risk Advisory Professional for Your Compliance Needs
How to Choose the Right ISO 27001 Penetration Testing Company
ISO Asset Management and Cybersecurity: Protecting Your Assets in the Digital Age
Understanding SOC 1 vs. SOC 2 Reports: Choosing the Right Compliance Framework for Your Organization
A Comprehensive Guide to ISO 27001 Annex A Controls for Information Security Management
HIPAA vs. HITRUST: What You Need to Know
Safeguarding Customer Trust: The Value of SOC 2 Audits
Streamlining The SOC 2 Audit Process in 10 Steps
How To Read A SOC 2 Report
HIPAA Compliance Made Simple: Your HIPAA Security Rule Checklist
Understanding HIPAA Compliance Reports: A Comprehensive Guide
The Importance of ISO 27001 Certification for SaaS Providers
What is a ISO 27001 Surveillance Audit?
SOC 2 and HIPAA Compliance: Similarities and Differences
Information Security Audits: An Overview of Different Types
Developing a Robust Patch Management Policy for SOC 2 Audits
The Role of a CPA Firm in ISO 27001 Compliance Audits
SaaS Infrastructure: Best Practices for ISO 27001 Compliance
What is ISO 27001? A Comprehensive Guide to Compliance
Unlocking Growth: The Value of SOC 2 Compliance for Startups
ISO 27001 Audits: Understanding Stage 1 vs. Stage 2
The 5 Benefits of SOC 2 Reporting for Your Organization
HIPAA Compliance in 7 Steps: Your Ultimate Guide
ISO 27001 for Small Businesses
SOC for Cybersecurity vs. SOC 2: What’s the Difference?
Who Needs ISO 27001 Certification?
SOC 2 Compliance: 5 Common Questions
ISO 27001 vs ISO 27002: What’s the Difference?
The Ultimate Guide to GDPR
What is NIST 800-53?
CCPA vs GDPR: Navigating Privacy Regulations
ISO 27017 vs ISO 27018: Which Is Right for Your Business?
Understanding SOC 2 Trust Service Criteria
7 Common Myths About SOC 2: Debunking Misconceptions
Understanding CCPA Compliance
The Importance of Regular Security Audits for Your Organization
Common Misconceptions About Security Audits
ISO 27001 vs ISO 42001: A Comprehensive Comparison
Self-Attestation or Use an Auditor: What’s Best for Compliance?
Choosing the Right QSA for Your Business: A Practical Guide
Understanding Compliance vs. Security
What Is Required for a Successful SOC 2 Risk Assessment?
Common Cybersecurity Audit Pitfalls and How to Avoid Them
Unpacking Your SOC Audit Opinion: What Your Report Truly Means
What is NIST 800-171?
What is SOC 3? Everything You Need to Know
The Cost of PCI Non-Compliance: Fines, Breaches, and Reputational Damage
Compliance for Seed-Stage Startups: When Should You Start Thinking About SOC 2?
Understanding the Differences: SOC 1 Type 1 vs. Type 2
Why We Partnered with Rippling - and What It Means for Your SOC 2 Audit
PCI Compliance Guide
Determining the Scope Statement
SOC 1 vs SOC 2 vs SOC 3 — Which Report Does Your Company Actually Need?
What is a SOC 2 Bridge Letter?
Your Guide to SOC 2 Attestation Reports
What is SOC 2 Penetration Testing and Why You Need One
Key Differences Between ISO 27001 and 27002
How Your Customer Success Manager fits into your journey to SOC 2 compliance
What is the difference between SOC 2 Type 1 and SOC 2 Type 2