At ConGlobal, we are unwavering in our commitment to data security. We continually invest in security best practices to ensure our customer’s data stays safe and secure. As part of this ongoing effort, we are excited to announce that we’ve successfully completed our SOC 2 report. 

To conduct the examination, we partnered with A-LIGN, a technology-enabled security and compliance firm trusted by more than 4,000 global organizations to help mitigate cybersecurity risks. 

“Obtaining our SOC 2 report sends a clear signal to our customers, partners, and other stakeholders that we are a partner they can trust. And in a world of rising cyberattacks and uncertainties, trust and security are more critical than ever,” said Mark Mills, ConGlobal’s VP, Advanced Solutions.

What is SOC 2? 

System and Organization Controls (SOC) is a widely recognized security standard developed by the American Institute of Certified Public Accountants (AICPA) that specifies how organizations should manage customer data. A SOC 2 report is often the primary document that security departments rely on to assess a vendor’s ability to maintain adequate security. Rather than a cybersecurity assessment that evaluates specific technical configurations, a SOC 2 report focuses more on how an organization implements and manages controls to mitigate the identified risks to the different parts of an organization.

The SOC 2 audit evaluates an organization based on five Trust Services Criteria (TSC):

• Security 
• Availability 
• Processing Integrity 
• Confidentiality 
• Privacy

The Security criterion, also known as the “Common Criteria,” is mandatory in all SOC 2 reports and addresses controls related to information security, access management, vendor oversight, system backups, business continuity, and more. Organizations may also include additional criteria as part of their assessment.

What This Means for Our Customers

Our SOC 2 assessment ensures that ConGlobal has implemented industry-leading policies and procedures to mitigate cybersecurity risks effectively. This achievement reflects our proactive approach to protecting data and maintaining the highest levels of operational integrity.

ConGlobal will undergo annual SOC 2 assessments to ensure continued compliance and can provide the SOC 2 report to current and potential customers under a non-disclosure agreement.