Compliance and Regulation

SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR and the breach notification laws, in plain language and with the deadlines that matter.

2 resources

Intermediate

PCI DSS Compliance: 12 Requirements, Levels and SAQs

PCI DSS is twelve requirements written in plain language, wrapped in machinery that almost nobody explains: four merchant levels, ten questionnaires named after letters and acronyms, and an enforcement chain that runs through your bank rather than through Visa.

22 min read

Intermediate

What Is SOC 2 Compliance? Criteria, Types and Audits

SOC 2 is the report enterprise buyers ask for before they will hand you their data. It is an accountant's opinion on your controls, not a certificate, and understanding that difference is what tells you how much one is worth.

16 min read