Gallagher Security obtains SOC2 Type 2 recertification

Issue 1 2025 News & Events, Access Control & Identity Management


Mike Randle

Global security leader Gallagher has achieved renewal of attestation status for System and Organisation Controls (SOC2 Type 2) as related to the cloud-hosted services of its integrated security solution, Command Centre.

SOC 2 Type 2 is considered one of the most rigorous audit frameworks that exist to date, indicating that third-party service providers who go to the lengths of completing one are committed to strict ongoing internal regulations to ensure that customer data is protected. The framework specifies criteria to uphold high standards of data security, based on five trust service principles: security, privacy, availability, confidentiality, and processing integrity.

Mike Randle, Gallagher Security Compliance Engineer, says the importance of managing more sensitive customer data has increased dramatically as the industry shifts towards cloud-based or hybrid-cloud security delivery.

“We're living in a world where information is highly valuable, and protecting that information is becoming increasingly difficult. This is why programs like the American Institute of Certified Public Accountants (AICPA) SOC 2 criteria framework were created: to ensure that companies can be trusted to protect their customers' information.

“As cloud solutions, compliances, and cyber threats become more commonplace, IT departments are gaining a more important seat at the decision-making table and have strong influence over security system choice. It’s our responsibility to be prepared with the information they need to build confidence.”

In January, the World Economic Forum released its Global Cybersecurity Outlook 2024 Insight Report, which made the concerning observation that “a stark divide between cyber-resilient organisations and those that are struggling has emerged.”

The voluntary SOC2 Type 2 compliance standard for service organisations maintained by the AICPA provides a structure for annually assessing an organisation’s internal controls for information security and privacy. During the audit process, an external party examined Gallagher’s Command Centre solution's cloud-hosted services to ensure that information security processes, policies, and procedures complied with the stringent AICPA trust principles.

In addition to the SOC2 Type 2 accreditation, Gallagher Security maintains a comprehensive suite of standards and certifications, including ISO27001, CAPSS 2021, and FIPS 140-3.

For more information contact Gallagher Security, +27 11 974 4740, [email protected], www.gallaghersa.co.za


Credit(s)




Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Highest increase in global cyberattacks in two years
Information Security News & Events
Check Point Global Research released new data on Q2 2024 cyber-attack trends, noting a 30% global increase in Q2 2024, with Africa experiencing the highest average weekly per organisation.

Read more...
From the Editor's desk: Apathy is a cybercriminal
Technews Publishing News & Events
      Welcome to SMART Security Solutions’ first print publication of the year, the SMART Access & Identity Handbook 2025. This year’s print issue is smaller than usual, so we include some articles in the ...

Read more...
Federated identity orchestration
Technews Publishing SMART Security Solutions Editor's Choice Access Control & Identity Management Security Services & Risk Management AI & Data Analytics
Understanding exactly who resides at the end of a digital device is key, and simple identity number verification by the Department of Home Affairs is no longer a viable solution on its own.

Read more...
What if security is just the beginning, not the end?
Gallagher Access Control & Identity Management
How we view the world depends on what we look for – when it comes to the security industry, there is an exciting shift on the horizon, says Meredith Palmer, Chief Product Officer, Gallagher Security.

Read more...
From QR code to compromise
Information Security News & Events
A new attack vector involves threat actors using fraudulent QR codes emailed in PDF attachments to bypass companies' phishing security measures by requiring users to scan the code with their mobile phones.

Read more...
Boost revenue streams for MNOS
News & Events Security Services & Risk Management Financial (Industry)
ReveNet has introduced its new solution, designed to safeguard and potentially boost revenue streams in an increasingly challenging landscape for MNOS. The new platform combines advanced analytics and is built on trust, transparency, and sustainability principles.

Read more...
Here’s to a SMART 2025
SMART Security Solutions Editor's Choice News & Events
This is the final news brief from SMART Security Solutions for 2024, and the teams would like to take this opportunity to thank our readers, advertisers and partners and wish everyone a safe and secure festive season.

Read more...
Organisations fear AI-driven cyberattacks, but lack key defences
Kaspersky Information Security News & Events Training & Education
A recent Kaspersky study reveals that businesses are increasingly worried about the growing use of artificial intelligence in cyberattacks, with 56% of surveyed companies in South Africa reporting a rise in cyber incidents over the past year.

Read more...
South African SMBs chart growth amid economic uncertainties
News & Events
Survey shows that business confidence among South African SMBs remains strong at 78%, but opportunities abound to boost productivity and accelerate digital transformation. Additionally, AI adoption has gained traction, with two-thirds of South African SMBs investing in AI over the past year.

Read more...
ONVIF launches new online learning initiative
Training & Education Surveillance News & Events
ONVIF has released the first course in a new online learning initiative designed to promote greater knowledge and understanding of ONVIF's workings. The first “Introduction to ONVIF” course is now available.

Read more...