Knowledge Base
Find answers to common questions and learn more about our services
Access review attestation emails template
## Overview
Managers must certify direct reports’ access quarterly for SOX-like programs.
## Email skeleton
Subject: `Q3 Access Certification – Actio...
compliance-audits-insurance
msp
seed-library
Jul 6, 2024
Read more →
Vendor risk register update cadence
## Overview
Vendors drift—SOC2 expires, breaches happen, products sunset.
## Cadence
Annual deep review high/critical; semi-annual light touch medium...
compliance-audits-insurance
msp
seed-library
Jul 5, 2024
Read more →
Logging retention for GDPR requests
## Overview
DSAR responses need logs of processing sometimes—too short retention frustrates investigations; too long risks proportionality challenges....
compliance-audits-insurance
msp
seed-library
Jul 4, 2024
Read more →
PII data map starter questionnaire
## Overview
Data map underpins GDPR/CCPA programs—start simple spreadsheet before fancy software.
## Columns
Data category, system of record, flows t...
compliance-audits-insurance
msp
seed-library
Jul 3, 2024
Read more →
Cyber insurance questionnaire primer
## Overview
Applications became detailed—prepare data room proactively.
## Collect
MFA coverage %, EDR vendor, backup immutability yes/no, IR retaine...
compliance-audits-insurance
msp
seed-library
Jul 2, 2024
Read more →
SOC 2 readiness: common MSP control gaps
## Overview
MSPs chase SOC 2 Type II to win enterprise deals—know frequent failure modes.
## Gaps list
Access reviews undocumented; change management...
compliance-audits-insurance
msp
seed-library
Jul 1, 2024
Read more →
PCI segmentation evidence collectors expect
## Overview
PCI scoping is diagram + config proof—not vibes that VLAN names imply security.
## Evidence bundle
Network diagrams with CDE highlighted,...
compliance-audits-insurance
msp
seed-library
Jun 30, 2024
Read more →
HIPAA BAA inventory maintenance
## Overview
Without current BAAs you cannot legally attribute responsibility for PHI processing.
## Inventory fields
Vendor legal name, service scope...
compliance-audits-insurance
msp
seed-library
Jun 29, 2024
Read more →