KirkpatrickPrice, the independent auditing firm, has produced a short video series highlighting BMI’s focus on security and SOC 2 Type II audits and compliance.BMI and KirkpatrickPrice initially engaged during an audit for one of BMI’s clients – due to BMI’s involvement in the project, KirkpatrickPrice visited as a part of the client audit.Soon after, BMI worked with KirkpatrickPrice to conduct a SOC 2 Type I audit of its own.
After the successful completion of the SOC 2 Type I audit, KirkpatrickPrice then executed a SOC 2 Type II audit for BMI – again with a successful outcome.Now in the fourth year of SOC 2 Type II auditing, BMI has continually honed its security methods and procedures based on the findings and recommendations of Kirkpatrick Price.
CIO INFLUENCE: General Data Protection Regulation (GDPR) Anniversary
The videos created by KirkpatrickPrice focus on four key areas: BMI’s security mindset, its culture of security, project security controls and benefits to BMI’s clients, and what it’s like to get audited.
Vice President of Technical Operations and Security Officer Jim Modrall says, “Before meeting with KirkpatrickPrice during our client’s audit, we weren’t sure we were ready for a SOC 2 audit.But the KP folks said what we had in place was so close that with a few adjustments, we’d be ready. So we started with the Type I audit and were found compliant. It was a major milestone for our company. Then when we moved ahead the following year with the Type II, it really tested us but we proved that our security was tight and we were doing the right things. Being highlighted in a video series they produced is wonderful – it shows that we’re staying on top of our security.
Working with KirkpatrickPrice has been a great experience – their team, especially the auditors, is knowledgeable and really digs into our processes and standards.Even if we’re compliant, they still give us recommendations to harden our posture even more, and we take those recommendations seriously. It’s an ever-evolving process, and we can’t get complacent.”
CIO INFLUENCE: Nextira Selected by Ansys Technology Partner Program to Support Customers Implementing Ansys Gateway Powered by AWS
[To share your insights with us, please write to sghosh@martechseries.com]
