Trava Security

The main difference between an audit and an assessment 

"The thing about security also is the threats are always changing. So you can't just keep doing what you've been doing and think you're going to be fine. You have to adapt to the changing threat landscape." In the world of Cybersecurity, things are everchanging. This week Cybersecurity expert and CEO &amp; Co-Founder of Trava Security Jim Goldman and Ben Phillips CPA and Director at KSM, discuss the differences between an audit and an assessment when it comes to information security internal risk assessments.&nbsp; Understanding the difference between a cybersecurity audit and assessment is crucial whether you are a business owner, IT professional, or auditor. Jim and Ben shed light on the motivation behind each - whether they are customer-driven or regulatory - and offer thoughts on which is right for you. If you are seeking cybersecurity certifications like SOC2 or ISO, knowing the difference is an important part of the process - along with patience, lots of patience! What you’ll learn in this episode:<ol><li>The differences between audits and assessments and why they should be conducted.&nbsp;</li><li>How audits and assessments work together, and how often they should be conducted.</li><li>Why are both internal and external audits important in the journey to getting certified?</li></ol> Things to listen for:[02:47] Various certifications and audits for data security.[07:53] The main difference between an audit and an assessment&nbsp;[09:40] Internal audit vs External audit.[15:54] Information security assessment and preparation advice given.[21:07] Differences between type 1 and type 2 SOC 2 reports. Connect with the Guests:<a href="https://www.linkedin.com/in/jigoldman/" rel="noopener noreferrer" target="_blank">Jim Goldman’s LinkedIn</a> - https://www.linkedin.com/in/jigoldman/<a href="https://www.linkedin.com/in/ben-phillips-cpa-cisa-citp-ccsfp-chqp-093b0111/" rel="noopener noreferrer" target="_blank">Ben Phillips' LinkedIn</a> - https://www.linkedin.com/in/ben-phillips-cpa-cisa-citp-ccsfp-chqp-093b0111/ Connect with the host:<a href="https://www.linkedin.com/in/jararowe/" rel="noopener noreferrer" target="_blank">Jara Rowe’s LinkedIn</a> - https://www.linkedin.com/in/jararowe/ Connect with Trava:Website <a href="http://www.travasecurity.com/?utm_source=casted&amp;utm_medium=podcast&amp;utm_campaign=podcast_share" rel="noopener noreferrer" target="_blank">www.travasecurity.com&nbsp;</a>Blog <a href="https://travasecurity.com/learn-with-trava/blog?utm_source=casted&amp;utm_medium=podcast&amp;utm_campaign=podcast_share" rel="noopener noreferrer" target="_blank">www.travasecurity.com/blog</a>LinkedIn <a href="https://www.linkedin.com/company/travasecurity/?utm_source=casted&amp;utm_medium=podcast&amp;utm_campaign=podcast_share" rel="noopener noreferrer" target="_blank">@travasecurity</a>YouTube <a href="https://www.youtube.com/@travasecurity?utm_source=casted&amp;utm_medium=podcast&amp;utm_campaign=podcast_share" rel="noopener noreferrer" target="_blank">@travasecurity</a>

Ben Phillips

CPA, CISA, CITP, CCSFP, CHQP

Jim Goldman

CEO and Co-Founder, Trava Security

Audits Vs. Assessments: What's the Difference and Which Is Right For You? With Jim Goldman and Ben Phillips

The Tea on Cybersecurity by Trava

Blog

Linkedin

Cybersecurity—a word we hear all the time. Show of hands for those who actually understand what it means.The Tea on Cybersecurity is here to help educate the newbs on what cybersecurity is, why it is important, and everything in between. The Tea on Cybersecurity is for everyone, but especially those small and medium-sized businesses that are starting their journey in building a cyber risk management program. Each show is about 15-30 minutes long to deliver you with the facts and less fluff.

The Tea on Cybersecurity