Insights

How to read a SOC report

As part of their annual vendor due diligence activities, many companies review Service Organization Controls (SOC) examination reports. However, they’re often unsure of what they should be looking for in the report.

By knowing how to read a SOC report and determine what information is relevant to your organization, you can help ensure that you get the most value and assurance out of reviewing the SOC report — and know that you’re in good hands with your vendor.

10/16/19
Services: SOC Examinations, Governance & Risk
By: Jacqueline Cooper

Cybersecurity Weekly: Freedom Healthcare Staffing, BitPaymer ransomware & Microsoft patches

Each week, Wipfli’s cybersecurity professionals review the latest breaches, vulnerabilities, patches and updates.

10/15/19
Services: Cybersecurity

The fraud triangle: Does employee fraud increase during a recession?

News stories have increasingly focused on whether a recession is in the near future of the economy. Will there be a recession? It’s still too early to tell, but this is the perfect time to talk about fraud’s relationship with the economy. 

10/15/19
Services: Cybersecurity, Business Valuations, Fraud and Forensic Services, Litigation Support Services, M&A and Transaction Support
By: David G. Friedman

What is human capital management?

Human capital management (HCM) is a term and concept that has evolved over the decades. And it is a broad term, which has led to not only different definitions but also confusion over what it actually encompasses. But HCM is extremely valuable to businesses and organizations, so we’re going to break down what it is and how it adds value.

10/14/19
Services: Human Capital Management Solutions
By: Erika Young

Information security and the employee exit checklist: Part II

In part one of this series, we discussed the importance of policies and procedures in protecting employers and their information (from intellectual property to physical assets). We also detailed what actions employers can take to protect their assets before an employee starts and while they’re a current employee. 

In part two, we’re going to dive into what actions to take when an employee hands in their notice. This is a critical area, and it pays to be well-prepared.

10/14/19
Services: Business Valuations, Fraud and Forensic Services, Litigation Support Services, M&A and Transaction Support, Cybersecurity
By: Marc W. Courey

Information security and the employee exit checklist: Part I

Don was once your best sales manager. Debra was a polished exec in your C Suite. Joel and Ray were your crackerjack IT team. 

Today they’re all working at other businesses. But now you suspect Don is using your proprietary customer list. You worry that Debra might have shared your next big product idea with a competitor. And you discover that Joel and Ray still have access to your network and have now exposed your company to a huge security risk. What do you do?

10/11/19
Services: Business Valuations, Fraud and Forensic Services, Litigation Support Services, M&A and Transaction Support, Cybersecurity
By: Marc W. Courey

How to modernize your business transition plan

As technology continues to disrupt the way we all do business, a new leadership question has surfaced: What does all this change mean for business transition planning?

10/9/19
Services: Tax, Business Succession Planning
By: Paul T. Lally

The Business Associates Path to HITRUST CSF Certification

The Health Information Trust (HITRUST) Alliance developed the Common Security Framework (CSF) in 2007 to give health care organizations a comprehensive set of baseline security controls.This whitepaper presents the key measures and corresponding activities business associates can expect to encounter along the path to HITRUST CSF certification.

10/7/19
Industries: Agribusiness, Construction and Real Estate, Dealerships, FinTech, Financial Institutions, Financial Services, Freshwater, Governments, Healthcare, Insurance, Manufacturing and Distribution, Nonprofits, Private Equity
Services: Governance & Risk
By: Paul J. Johnson