printer friendly version

Gallagher Security obtains SOC2 Type 2 recertification

Mike Randle.

Global security leader Gallagher has achieved renewal of attestation status for System and Organisation Controls (SOC2 Type 2) as related to the cloud-hosted services of its integrated security solution, Command Centre.

SOC 2 Type 2 is considered one of the most rigorous audit frameworks that exist to date, indicating that third-party service providers who go to the lengths of completing one are committed to strict ongoing internal regulations to ensure that customer data is protected. The framework specifies criteria to uphold high standards of data security, based on five trust service principles: security, privacy, availability, confidentiality, and processing integrity.

Mike Randle, Gallagher Security Compliance Engineer, says the importance of managing more sensitive customer data has increased dramatically as the industry shifts towards cloud-based or hybrid-cloud security delivery.

“We're living in a world where information is highly valuable, and protecting that information is becoming increasingly difficult. This is why programs like the American Institute of Certified Public Accountants (AICPA) SOC 2 criteria framework were created: to ensure that companies can be trusted to protect their customers' information.

“As cloud solutions, compliances, and cyber threats become more commonplace, IT departments are gaining a more important seat at the decision-making table and have strong influence over security system choice. It’s our responsibility to be prepared with the information they need to build confidence.”

In January, the World Economic Forum released its Global Cybersecurity Outlook 2024 Insight Report, which made the concerning observation that “a stark divide between cyber-resilient organisations and those that are struggling has emerged.”

The voluntary SOC2 Type 2 compliance standard for service organisations maintained by the AICPA provides a structure for annually assessing an organisation’s internal controls for information security and privacy. During the audit process, an external party examined Gallagher’s Command Centre solution's cloud-hosted services to ensure that information security processes, policies, and procedures complied with the stringent AICPA trust principles.

In addition to the SOC2 Type 2 accreditation, Gallagher Security maintains a comprehensive suite of standards and certifications, including ISO27001, CAPSS 2021, and FIPS 140-3.

Share this article:

Further reading: