CDS Visual recently completed a SOC 2® Type II audit, an independent review and certification by a qualified third-party of how we handle sensitive data. The voluntary certification was a significant investment of time and resources but also an important indicator of how much we prioritize data security. It's also very meaningful for our customers, who entrust us with their data.
SOC 2 (Service Organization Control) standards are designed to create, maintain, prove and enhance the way a vendor manages sensitive data – both on-premise and in cloud environments. It was originally established by the American Institute of Certified Public Accountants (AICPA) and is well established in the financial and technology industries. But as technology and data have become integral in manufacturing, SOC certification has become a priority for leading manufacturers and the suppliers and service providers they share data with.
There are two levels of SOC certification. Type I looks at the design and implementation of internal controls as of a specific date, i.e., are they in place. Type II, which CDS Visual undertook, looks at the design and implementation, as well as the operating effectiveness of those controls throughout a specified time period, i.e., are they working effectively.
A service organization may select any or all the trust service principles applicable to their business and CDS Visual chose to report on security, availability, and confidentiality. The SOC 2 Type II audit was comprehensive and included an examination of our policies and procedures regarding network connectivity, firewall configurations, systems development lifecycle, computer operations, logical access, data transmission, backup and disaster recovery, and other critical operational areas of our business.
The importance of SOC 2 Type II compliance in the manufacturing industry should not be underestimated. Data breaches are a growing threat at all levels. Manufacturers need to know that the service providers they choose to work with are fully committed to creating and maintaining a secure operating environment for their data. Our successful certification illustrates that ongoing commitment.
