In today’s technology driven world, data security and compliance are critical to conducting business. Aries Systems works diligently to ensure we stay up-to-date on compliance requirements while performing regular security examinations. Aries is SOC 2 Type 1 compliant, so what does that mean?
What is SOC 2?
SOC stands for “System and Operations Controls.” SOC regulations were developed by AICPA (American Institute of Certified Public Accountants) to regulate the security of service organizations that store or process customer data. SOC 2 examinations may only be performed by a licensed CPA firm.
Essentially, SOC 2 focuses on the assurance that an organization complies to specific controls when processing data through its systems ensuring the security of customer data.
Trust Services Control Categories
SOC 2 has five trust service categories that an organization may opt-in to be evaluated against as part of the SOC 2 examination. The service organization may select any of the five categories below. Aries Systems was examined on Security, Availability, and Confidentiality.
Security – Information and systems are protected against unauthorized access, unauthorized disclosure of information, and damage to systems that could compromise the availability, integrity, confidentiality, and privacy of information or systems and affect the entity’s ability to meet its objectives.
Availability – Information and systems are available for operation and use to meet the entity’s objectives.
Processing Integrity – System processing is complete, valid, accurate, timely, and authorized to meet the entity’s objectives.
Confidentiality – Information designated as confidential is protected to meet the entity’s objectives.
Privacy – Personal information is collected, used, retained, disclosed, and disposed to meet the entity’s objectives.
Note: Aries was not audited for Privacy and Processing Integrity as those categories do not apply to our operations.
How does this benefit me?
Here are some ways that our SOC 2 examination benefits your business:
- Confidence that we will protect your data
The examination ensures that we adhere to advanced security requirements so that our systems are securely designed to protect your data.
- We mean business when it comes to protecting your business
Aries Systems invests heavily in its systems and infrastructure to ensure we are properly suited to help keep your business growing. We understand the importance of protecting your business and we take our job very seriously.
As the publishing industry evolves, Aries is committed to providing secure services and dedicated to protecting your data through our SOC 2 Type 1 compliance, continuous security training, ongoing testing and business resiliency exercises.