Understanding CSA STAR: the gold standard for cloud security

As businesses increasingly migrate to the cloud, ensuring the security of cloud services has become a top priority. The Cloud Security Alliance (CSA)...

Navigating cyber privacy and data protection in Australia

In Australia, the cyber privacy and data protection landscape consists of several national regulations plus international influences. Understanding...

What to look for when selecting an audit firm in 2025

This blog gives you a headstart on what to look for when selecting an audit firm by highlighting key factors to consider. By asking the right questions...

The TL;DR of SOC 2

In 2024, the importance of SOC 2 compliance has reached new heights as businesses increasingly rely on third-party service providers to handle...

Understanding the global standard for data protection

CCPA or CPRA: What California's privacy laws mean for you

The acai bowl of compliance

A fresh take on frameworks

The TL;DR of ISO 27001

ISO 27001, the international standard for Information Security Management Systems (ISMS), has evolved significantly over the years to address the...

Empowering Australia’s leading tech companies

In the fast-paced tech industry, achieving compliance isn’t just a checkbox exercise—it’s the foundation for scaling globally. For premium technology...

The evolution of compliance frameworks

By Paul Wenham, Cofounder and Co-CEO

Everything we knew about SOC 2 was wrong

The power of using compliance metadata

By Paul Wenham, Cofounder and Co-CEO

Collaboration vs competition in an ever-changing compliance landscape

By Paul Wenham, Cofounder and Co-CEO

Bridging the Gap Across the Trust Triangle

By Paul Wenham, Cofounder and Co-CEO

The Cycle of Trust: From Public Concerns to Industry Adoption

By Paul Wenham, Cofounder and Co-CEO

The Future of Trust: How Compliance Paves the Path Forward

By Paul Wenham, Cofounder and Co-CEO

Unlocking Trust through Compliance Metadata

In this post, we introduce Pillar: a trailblazing solution that uses Compliance Metadata to strengthen the 'Trust Triangle' and revolutionize the way...

The story behind continuous audit: Why we're doing it

Continuous audit has been talked about for over 10 years. From the start of my career, I remember it talked about as a concept, that made a lot of...

The Compliance Pandemic

As the COVID-19 pandemic captured the headlines; another, less visible pandemic was playing out. The compliance pandemic.

Is unrestricted CDR accreditation the best path? 5 reasons it might be

There are now five ways to use Consumer Data Right data; unrestricted, sponsored, operating as a representative or trusted advisor, or using CDR...

The Latest Updates to the Consumer Data Right Rules (Version 3)

There are now five access models for CDR data, after previously only the unrestricted accreditation model.

The boundary of your CDR Data Environment

Defining the boundary of your CDR Data Environment is an important early step in your pursuit of CDR accreditation. Why?

Google CDR Security

Google's Cloud Platform and Workspace provide a comprehensive suite of products, settings, and user guides for achieving the CDR accreditation.

How to Align Your SOC 2 to the CDR

The SOC 2 Plus CDR approach to accreditation requires a few tweaks from the standard SOC 2 reporting approach.

Why SOC 2 for CDR Accreditation?

There are three (3) major benefits to achieving accreditation through the more established SOC 2 reporting standard.