Interview with Alex Bates of Dark Rock Cybersecurity: Using SOC 2 to Enhance Your Business, Not Just Manage Risk

Host - Rory Holland - cstmr.com - Linkedin: CSTMRInterviewed - Jack Macy, CSTMR and Alex Bates, Dark Rock Cybersecurity - LinkedIn: CSTMR and Dark Rock CybersecurityWant to be a part of the podcast? Contact Rory today!In This EpisodeJoin us for Episode 29 of Mighty Finsights, where Rory Holland interviews Jack Macy, founder and COO of CSTMR, and Alex Bates with Dark Rock Cybersecurity about the journey CSTMR took to achieve SOC 2 compliance. They explore the importance of SOC 2 for building trust with clients, the challenges faced during the process, and the benefits of being a certified vendor in the financial services industry. The conversation also covers the selection of the right SOC 2 partner and offers advice for organizations considering pursuing SOC 2 compliance, including why it’s helpful to have an expert coach to guide you through the process.Key TakeawaysSOC 2 compliance is an excellent way to improve organizational health and build client trust.CSTMR's proactive approach to SOC 2 is unusual for service-based business, especially agencies.The SOC 2 process helps formalize risk management practices and “harden” security protocols.Data breaches incur significant costs and reputational harm for organizations.Selecting the right SOC 2 partner will make a big difference in your experience and the quality of your results.Investing in compliance should be viewed as a long-term strategy.Training and educating the organization as a whole is key to successful implementation.SOC 2 is a report of compliance, not a “certification.”Chapters00:00 Episode Introduction01:58 Why Did CSTMR Pursue SOC 2?03:58 The Importance of SOC 2 for Professional Services06:09 Challenges in Achieving SOC 2 Compliance09:52 Real-World Security Failures12:57 The Direct Impact on a Brand14:27 The Prevalence of SOC 2 in the Marketing Space16:56 Benefits to CSTMR's Clientele19:48 Selecting the Right SOC 2 Partner22:21 What to Look for in a SOC 2 Vendor24:13 How Playing Competitive Sports Informs Alex's Work29:20 How to Know If SOC 2 Is Right for Your Organization30:28 How CSTMR Tackled the Challenges of Passing SOC 234:07 Unpacking the Gap Analysis35:44 Trust Service Criteria