Up next in our Ask the Expert series, Ben Rothke, Senior Information Security Manager, reviews two certifications that should be part of your information security strategy: Service Organization Control (SOC) 2 Type 2 and International Organization for Standardization (ISO) 27001. Tapad, a part of Experian, is 27001 and SOC 2 Type 2 compliant.
Two information security certifications you can trust
Seals from Good Housekeeping and Underwriters Laboratories give consumers confidence that they can trust the product that they’re buying. For IT solutions or service providers, what, or who can you turn to for that seal of approval? There are many equivalent third-party attestations you can use. But which should you trust?
- The International Organization for Standardization (ISO) 27001
- The American Institute of Certified Public Accountants (AICPA) System and Organization Controls (SOC)
International Organization for Standardization (ISO)
27001 is an international standard for information security from the ISO. ISO 27001 is globally acknowledged and sets requirements for controls, maintenance, and certification of an information security management system (ISMS). This international standard provides organizations with a framework to identify, manage and reduce risks related to the security of information
System and Organization Controls (SOC)
The SOC, as defined by the AICPA, is a set of audit reports. SOC reports, like 27001 certificates, are used by service organizations to give their customers the confidence they have adequate information security controls in place to protect the data that they handle.
SOC 2 is an assessment of controls at a service organization regarding security, availability, processing integrity, confidentiality, and privacy. The purpose of the report is to provide extensive information and assurance to a broad range of users about the controls at a service organization that are relevant to the security, availability, and processing integrity of the systems that process user data, as well as the confidentiality and privacy of the information processed by these systems.
Why ISO 27001 and SOC 2 are important
The value of these third-party attestations is two-fold:
- Organizations can show they have passed an independent external audit
- Third-party attestations save organizations the time of having to do their own audits
In addition to 27001 and SOC 2 Type 2 compliance, we are also certified with ISO 27017 and 27018, which are add-ons to 27001 that are specific to cloud computing. We take the security and privacy of our customers’ data as seriously as they do.
Every cloud service provider (CSP) has a responsibility matrix that details what security and privacy tasks they are responsible for and which ones the customer is responsible for. Any cloud customer that needs to be made aware of what their security tasks are is putting themselves at risk.
So, when you want to engage a CSP, ask them for their attestations. They worked hard for them and will be proud to share their compliance.
We’re powered by decades of setting standards in marketing services
At Experian, we’re a privacy-first business. We’re highly focused on respecting people, their data, and their privacy. We continue to show our dedication to information security by completing these security audits every year.
The constant changes to data compliance regulations can be challenging to navigate, but you don’t have to do it alone. Contact us today. We will be your guide so you can ethically and confidently reach your customers.
Contact us today
About our expert
Ben Rothke, Senior Information Security Manager
Ben Rothke, CISSP, CISA, is a Senior Information Security Manager at Tapad, a part of Experian. He has over 25 years of industry experience in information systems security and privacy. His areas of expertise are in risk management and mitigation, security and privacy regulatory issues, cryptography, and security policy development. Ben is the author of Computer Security – 20 Things Every Employee Should Know (McGraw-Hill), and writes security and privacy book reviews for the RSA Conference Blog and Security Management magazine.
Latest posts
The concept of identity resolution has emerged over the years as a strategic imperative among marketers and technology vendors. A report by Forrester contends that accurately establishing and maintaining customer identity is one of the most perplexing challenges facing marketers today. Customers have footprints in the offline and online worlds and tend to seamlessly transition across various channels and devices – presenting a unique challenge to truly understand who they are. But the ability to stitch these disparate components of information together means marketers can make better decisions and have more meaningful interactions with their customers. And for customers, this means an experience with personalized advertising content more likely to resonate with them. Why should marketers prioritize identity? The ability to accurately identify customers is the most basic prerequisite for marketing analytics, orchestration and execution. As such, it is becoming increasingly important for brands and marketers planning to link together disparate systems of audience insights and engagement to foster a more seamless and personalized omnichannel customer experience. For example, if an advertiser can identify a customer’s interests, as well as how that person prefers to consume information, then the advertiser can create and deliver messaging that will resonate with the customer. However, like most competitive differentiators, the mission critical components to accurately determine an identity reside within the suite of identity management tools at the marketers’ disposal and the expertise required for proper execution – a struggle for most marketers. But when properly implemented, a comprehensive customer identity strategy can be among a brand or marketer’s most valuable and proprietary assets. Where to begin with identity resolution? With the convergence of CRM platform data, cross-channel online touchpoints, offline record linkage management, probabilistic cross-device graphs, and data onboarding—evolving from point solutions to unified platforms—marketers are faced with an increasingly complex set of challenges in addressing and solving for customer identity management. To properly implement from the get go, and to avoid having to bolt on disparate technologies down the road, emerging industry trends and success stories suggest marketers need a neutral technology service provider that can provide each of these solutions via a single, unified platform. A vendor that can build a solid identity management foundation comprised of omni-channel targeting and attribution, cross-device resolution, online-offline linkage management, and data onboarding form the nexus of a cohesive identity strategy, built to last. Experian helps connect consumer identity As a trusted name in data and information services for more than 40 years, we are committed to privacy by design and the responsible usage and security of data. Whether you’re a brand, agency, or publisher, Experian has the wide-ranging toolset to help you put people at the heart of your business and make better marketing decisions. By harnessing the power of the sum of these parts, fusing both offline and online identifiers and attributes, Experian has established a leadership position in identity management. If you’re ready to begin building your identity foundation, contact us and get started today! Learn more about why identity matters to marketers and consumers, here! Contact us today
Tapad, part of Experian, partners with Flashtalking to create impactful attribution modeling strategy
FeaturedPartnership Yields Increased Match and Connectivity Rate Through Tapad Graph, acquired by Experian March 27, 2018 — New York, N.Y. — Tapad, part of Experian, is reinventing personalization for the modern marketer and today announced the impactful results of its strategic partnership with Flashtalking, the leading global independent platform for ad delivery, unification and insights. Flashtalking is one of Tapad’s most engaged partners, using the Tapad Graph to unify cross-device engagement and identity-driven consumer behaviors for attribution modeling. The company leverages a unique identifier that, in conjunction with Tapad’s Graph, provides robust multi-touch attribution solution for its clients. This partnership has resulted in above-industry match and bridge rates for Flashtalking and its customers. Overall, the Tapad Graph yielded a 71 percent match rate with 41 percent of converters engaging on multiple devices, highlighting the importance of cross-device measurement. Tapad’s identity solutions provide Flashtalking with a more holistic view of global engagement. Flashtalking marries ad server log file data with the Tapad Graph to connect all interactions in the consumer journey. This enables Flashtalking to provide more accurate and impactful cross-device attribution, which ultimately enables better optimization. These achievements have led to recognition of Tapad and Flashtalking’s work by the I-COM Global Forum for Marketing, Data and Measurement. “Tapad allows us to understand user engagement across devices and platforms at both the household or individual user level, which is extremely beneficial when providing marketers with true path to conversion and attribution,” said Steve Latham, global head of analytics at Flashtalking. “Since our relationship began, we’ve successfully leveraged Tapad data to provide more accurate, actionable insights that have helped numerous brands achieve substantial gains in media effectiveness.” Flashtalking client Michael Lamontagne, SVP of analytics and CRM at 22squared says “We are big believers in using cross-device insights to improve our campaigns. Flashtalking has been a strategic partner in the pursuit of that goal. By incorporating the Tapad Graph, Flashtalking delivers powerful insights into user engagement and media attribution across browsers and devices. Of equal importance, their bundled solution makes it easy and efficient, saving our team countless hours of busy work.” Contact us today
Tapad, part of Experian, partners with Freckle IoT to enable cross-device offline attribution for brands
FeaturedThe Tapad Device Graph™ Complements Freckle’s IoT Capabilities to Extend Scale and Precision of Audience Data New York, NY — December 6, 2017 — Tapad, part of Experian, is the leader in cross-device marketing technology and Freckle IoT, the global leader in multi-touch, offline attribution, today announced they are partnering to provide brands with a holistic and insightful view of their customers, in predefined locations in all global markets. Starting today Freckle IoT will be leveraging the Tapad Device Graph™ to supplement the company’s data set to offer brands more granular attribution data. Consumer’s online behavior is becoming more and more complex, with the average consumer owning three or more devices and 35 percent of consumers converting on a different device from the one on which they started their research. These interactions become even more complicated when considering how online interactions and media impact offline sales. The collaboration between Tapad and Freckle, which combines Freckle IoT’s persistent location data with Tapad’s proprietary cross-device technology, is an important step in empowering brands with the information they need to better understand how digital media, consumed across multiple devices, is impacting offline attribution. Using its opt-in, first-party data, Freckle IoT helps brands measure the effectiveness of their advertising by independently matching media spend to in-store visits. Tapad’s technology extends Freckle’s data-set by allowing brands to access additional deterministic and probabilistic data, at scale and across all devices, to analyze consumer behavior ahead of in-store purchase. “Combining our technology with Tapad’s identity-driven solutions was a natural fit for our business,” said Neil Sweeney, founder and CEO at Freckle IoT. “With our unbiased, agnostic measurement and Tapad’s precise and privacy-safe data set, we knew this partnership would be a strong complement to providing more effective results for the needs of our brand partners.” For more information on Freckle IoT’s measurement offerings, please visit www.freckleiot.com. Contact us today