A Bigger, Badder Villain: How to Face the Advanced Threats of AI

by Tori Thurmond / March 21, 2024

Every year in January, the KirkpatrickPrice team gathers in Tampa, FL for one of our biannual team meetings. This week is always a fun one where we get to reunite with our long-distance coworkers and discuss our goals for the new year. This January was no different. We had a great first week of 2024, but by Friday, some of us didn’t want the fun to end. We drove a…

SSAE 16 vs SSAE 18: Changes to SOC 1 Compliance Audits

by Hannah Grace Holladay / February 28, 2024

In April 2016, the American Institute of Certified Public Accountants (AICPA) made an important update to the attestation standards that will affect your next SOC 1 audit. Statement on Standards for Attestation Engagements (SSAE) No. 18, Attestation Standards: Clarification and Recodification provides changes to SOC 1 audits and how attestation engagements are categorized. Below, we explore the reason for this change and how the SSAE 18 affects you What is…

The Bleach Breach: How a Quality SOC 2 Audit Could Have Helped Clorox

by Tori Thurmond / October 12, 2023

Another day, another breach. There have been quite a few cybersecurity events breaking the news involving major companies lately—one of the notable events involving Clorox.   Back in August, the multibillion-dollar corporation discovered unauthorized activity in some of their IT systems. The organization enabled their business continuity plan (BCP), but was forced into processes that affected their production capacity. The product shortages resulted in the organization losing money each and every…

Rebuilding Trust After a Data Breach

by Hannah Grace Holladay / October 2, 2023

Threats are constantly evolving.  We know you want to be ready to face them, but what happens when you’ve already experienced a breach? How do you restore not only your business operations, but your reputation?    According to Pew Research Center, half of Americans feel that their personal information is less secure than it was five years ago. Even more so, 64% of American adults have experienced data theft via credit…

Learning from MGM’s Mistakes: How a Quality Audit Can Help

by Tori Thurmond / September 15, 2023

A $33 billion company breached because of a 10-minute phone call, and, according to vx-underground, all the hackers had to do was a simple search on LinkedIn.   You’ve probably heard about the MGM breach that happened earlier this week, but did you know that the attack was a result of social engineering? A notorious hacking group, ALPHV (aka BlackCat), searched one of MGM’s employees on LinkedIn, called MGM’s help desk,…