Field notes
Compliance, explained for people who run infrastructure.
- 01
SOC 2 for MSPs: What Your Clients Are Asking For
Clients ask MSPs for SOC 2 because you hold admin access to their systems. A SOC 2 Type II report shows an independent CPA tested your security controls over 3 to 12 months.
MSPs · 4 min - 02
SOC 2 vs ISO 27001 for Cloud and IT Service Providers
SOC 2 is the report US buyers ask for. ISO 27001 is the certificate buyers in Europe and Asia ask for. If you sell in both markets, run them together: most controls overlap.
Cloud and IT Service Providers · 4 min - 03
SOC 2 for Data Center Operators: Scope and Timeline
Data center SOC 2 reports focus on physical access, environmental controls and Availability. Your tenants rely on your report for the parts of their own audits that run in your building.
Data Center Operators · 4 min - 04
How MSSPs Can Answer Security Questionnaires Faster
Build one approved answer library, back it with a current SOC 2 report or ISO 27001 certificate, and answer most questions by pointing to it. Questionnaires then take days, not weeks.
MSSPs · 3 min
About the blog
New guides are added about once a month. Each one is under 5 minutes to read.
MSPs, MSSPs, SaaS companies, cloud service providers, data center operators and IT service providers working toward SOC 2 or ISO 27001. Each guide takes under 5 minutes to read.