RightShip Successfully Earns SOC 2 Report to Enhance Data Protection

 

A-LIGN-SOC Badge (1)

 

At RigthShip, we continually invest in security best practices to ensure that our customer’s data stays safe and secure. As a part of this ongoing effort, RightShip is pleased to announce that we have successfully earned our SOC 2 report.   

The examination was conducted by A-LIGN, a technology-enabled security and compliance firm trusted by more than 4,000 global organisations to help mitigate cybersecurity risks.  

 


A SOC 2 report addresses risks associated with the handling and access of data. Rather than a cybersecurity assessment that evaluates specific technical configurations, a SOC 2 report focuses more on how an organisation implements and manages controls to mitigate the identified risks to the different parts of an organization. 

The SOC 2 audit testing framework is based off of the Trust Services Criteria (TSC), which are used to identify various risks (points of focus) an organisation should consider addressing. Based on the TSCs the organisation selects to be in-scope, a third-party compliance and audit firm evaluates whether the organisation has the appropriate policies, procedures, and controls in place to manage the identified risks effectively. 

There are five Trust Services Criteria: 

  1. Security (required) 
  1. Availability (optional) 
  1. Processing Integrity (optional) 
  1. Confidentiality (optional) 
  1. Privacy (optional) 
     

In order to complete a SOC 2 examination and receive a letter of attestation successfully, it means an organisation is addressing controls in areas such as information security, access control, vendor management, system backup, business continuity, disaster relief, and more.    

A SOC 2 report highlights the controls in place that protect and secure an organization’s system or services used by its customers. The scope of a SOC 2 report extends beyond the systems that have a financial impact, reaching all systems and tools used in support of the organization’s system or services.  

Know your data is safe and secure with RightShip 

 

RightShip will make the SOC 2 report available to current or potential customers upon execution of a non-disclosure agreement.  We hope the steps we have taken help you and your IT teams remain confident in knowing that your data is secure with RightShip.   

 
To learn more about our security policies and initiatives, please contact us at info@rightship.com . 

About A-LIGN 
A-LIGN is the leading provider of high-quality, efficient cybersecurity compliance programs. Combining experienced auditors and audit management technology, A-LIGN provides the widest breadth and depth of services including SOC 2, ISO 27001, HITRUST, FedRAMP, and PCI. A-LIGN is the number one issuer of SOC 2 and HITRUST and a top three FedRAMP assessor. For more information, visit a-lign.com.