1010data, which SymphonyAI acquired in June 2023, was facing challenges in making the external SOC 2 attestation processes valuable and repeatable to the business. Reporting was difficult, and the controls set were suboptimal in operational design, resulting in low management confidence in the integrity of the report.
1010data needed a business partner that could deliver based on its business model needs and required guidance for building a scalable and repeatable security assurance process.
“We had a sense that our past audits were not capturing the reality of the state of our controls, and that updates and changes were needed to meet our strategic goals. The Ignyte team had the right credentials and depth of knowledge to develop a new baseline for our current and future SOC 2 audits.
Ignyte helped us tighten up how we managed our audit and evidence-collection processes. By helping us to improve our own processes and by instilling a sense of integrity in the audit itself, 1010data’s management now has confidence in the results contained in our final report.”
The Ignyte team worked with 1010’s executive team to review mandatory obligations, examined contracts, and extrapolated applicable best practices to deliver 1010’s Enterprise Control Strategy and Design. The controls required the development of privacy and security controls for its operational effectiveness.
Ignyte crafted a new SOC 2 Type 2 management scope and technical boundary based on the contract reviews and discussions about 1010’s Data Centers and assets with key stakeholders. Starting with the SOC2 Trust Criteria, Ignyte designed the control set by identifying and including appropriate HIPAA and NIST controls for security and cyber to address the concerns of 1010data.
The control framework is now used for the audit, streamlining internal practices for evidence collection and establishing repeatable processes that sped up the audit to lay the foundation for success in future audits. The Ignyte team helped 1010 achieve the ultimate goal of reducing supplier risk within their supply chain and gave management confidence for new customer onboarding and stability for acquisitions.
Multiple Cybersecurity Frameworks Management at once has never been easier.
We listen and learn about your business challenges – Meet with a Ignyte experts
Get a custom tailored demo of Ignyte Platform
Discover the best practices and strategies to automate your security risk management challenges