Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
Contact us today
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
Tapad's, part of Experian, SVP of Identity shows us how marketers might communicate seamlessly through emerging channels like voice, the smart home, and, yes, podcasts.In his relatively new role as senior vice president of identity at Tapad, a part of Experian, Ajit Thupil keeps a close eye on the evolution of marketing as it becomes more intent on using data and identity technology to track ROI. Here he sits with Chris Wood at Tapad’s New York offices to discuss the future of identity. (To capture the inventive atmosphere at this location, the room they chatted in was named after Leonardo da Vinci.) For Thupil, it all comes back to the customer, whether it’s a brand client or a consumer. Brands want measurability and customers demand a seamless experience across the many devices they use in a day. While consumers are understandably reticent about giving up personally identifiable information (PII), current identity solutions use anonymous data profiles to connect the dots at the individual or household level. Given the frequency that users switch devices, along with their tendency to share bigger screens like TVs, there’s no dearth of challenges for this “head of problem solving” to solve. Contact us today
Joint solution will enhance accuracy and reach across North America, EMEA and APAC NEW YORK, April 17, 2019 /PRNewswire/ — Tapad, a global marketing technology company and leader in digital identity resolution solutions, today announced a new joint capability with Arm®Treasure DataTM , a leader in enterprise customer data management. The partnership combines The Tapad GraphTM technology with Arm Treasure Data's robust enterprise Customer Data Platform (CDP), enabling advertisers in the Arm Treasure Data marketplace to access Tapad's datasets. With the integration of Tapad's Graph and Arm Treasure Data's existing first party data, marketers will be able to deliver scalable, cross-device messaging with precision. In addition, marketers can benefit from anonymous customer journey analysis, audience expansion and online and offline attribution. Arm Treasure Data's APAC market customers will have access to expanded audience reach by leveraging Tapad's global, proprietary datasets. While Tapad will be able to extend its presence into the APAC region, tapping into Arm Treasure Data's existing footprint. "Combining Tapad's Graph with Arm Treasure Data's CDP will enable our customers to make holistic, data-driven decisions that increase ROI," said Chris Feo, SVP of Global Data Licensing and Strategic Partnerships at Tapad. "In combining these two solutions, we can now offer advertisers the value of both technologies to optimize their marketing initiatives and create seamless experiences across multiple devices and channels." "The Tapad GraphTM is a trusted and established platform with a history of innovation," said Stephen Lee, Senior Director, Business Development, Arm Treasure Data. "Integrating Tapad's technology into the Arm Treasure Data CDP will allow for streamlined experiences across markets, achieving global scalable reach." For more information about The Tapad GraphTM, or to request a demo, visit our identity page. About Tapad Tapad, Inc. is a global marketing technology company and leader in digital identity resolution solutions. The Tapad GraphTM, and related solutions, provide a privacy-safe approach to connecting device identifiers to brand and marketer data, thereby allowing for enhanced measurement, attribution, reach and ROI of marketing campaigns. The Tapad GraphTM enables marketers around the world to maximize campaign effectiveness and drive business results. Tapad is recognized across the industry for its innovation, growth and workplace culture, and has earned numerous awards, including the TMCnet Tech Culture Award. Based in New York, Tapad also has offices in Chicago, London, Oslo, Singapore and Tokyo, and is a wholly owned subsidiary of Telenor Group. About Treasure Data Arm Treasure Data enterprise Customer Data Platform (CDP) unifies data from multiple sources – online, offline, IoT and device generated data – and empowers enterprises to disrupt their markets with superior customer experiences. Our customers are creating transformational customer relationships by connecting the data dots with our CDP. Arm Treasure Data is fully owned by Arm Holdings and has a global customer base of over 300 enterprises including Fortune 500 and Global 2000 companies. Our clients manage over 130 trillion records, resulting in more predictable and profitable business results. Contact us today
Leading global marketing technology company, Tapad, a part of Experian, adopts The Trade Desk’s streamlined cookie ID into its identity resolution solutions to increase global cookie coverage across the internet April 03, 2019 09:00 AM Eastern Daylight Time LOS ANGELES & NEW YORK–(BUSINESS WIRE)–Global marketing technology company, Tapad, a part of Experian, has partnered with The Trade Desk to onboard The Trade Desk’s unified ID solution into its digital identity driven solutions. The Trade Desk’s unified ID solution is free for all parties spanning the digital advertising supply chain, including SSPs, DSPs, DMPs and data providers. With leading players onboarding the unified ID solution, such as Tapad, streamlined cookie syncs make ad viewing experiences better for consumers, increase match rates for all parties, and expand cookie coverage on a global-scale. Adoption of The Trade Desk’s global cookie footprint enables Tapad customers to benefit from greater precision and potentially higher performing digital marketing campaigns. “Digital identity resolution is key to improving digital marketing campaigns. Supporting The Trade Desk’s unified ID solution, in conjunction with our cross-device and identity resolution offerings, helps us and the entire open ecosystem,” said Chris Feo, SVP of Global Data Licensing and Strategic Partnerships at Tapad. “It simplifies cookie syncing, and increases match rates among our partners; enabling our customers to improve marketing campaign performance.” “Identity is critical in the ecosystem and as a long-standing leader in the space, Tapad has shown a strong commitment to building digital identity resolution solutions that help marketers launch more effective campaigns on a global scale,” said Ed Chater, VP of Data Partnerships, The Trade Desk. “We are thrilled for their participation and look forward to solving the digital identity narrative across the industry through this partnership. The continued widespread adoption of the unified ID solution validates our collective mission to improve the effectiveness of digital advertising.” About Tapad Tapad, Inc. is a global marketing technology company and leader in digital identity resolution solutions. The Tapad Graph™, and related solutions, provide a privacy-safe approach to connecting device identifiers to brand and marketer data, thereby allowing for enhanced measurement, attribution, reach and ROI of marketing campaigns. The Tapad Graph™ enables marketers around the world to maximize campaign effectiveness and drive business results. Tapad is recognized across the industry for its innovation, growth and workplace culture, and has earned numerous awards, including the TMCnet Tech Culture Award. Based in New York, Tapad also has offices in Chicago, London, Oslo, Singapore and Tokyo, and is a wholly owned subsidiary of Telenor. About The Trade Desk, Inc. The Trade Desk™ is a technology company that empowers buyers of advertising. Through its self-service, cloud-based platform, ad buyers can create, manage, and optimize more expressive data-driven digital advertising campaigns across ad formats, including display, video, audio, native and, social, on a multitude of devices, such as computers, mobile devices, and connected TV. Integrations with major data, inventory, and publisher partners ensure maximum reach and decisioning capabilities, and enterprise APIs enable custom development on top of the platform. Headquartered in Ventura, CA, The Trade Desk has offices across North America, Europe, and Asia Pacific. To learn more, visit thetradedesk.com or follow us on Facebook, Twitter, and LinkedIn. Contact us today