The financial services industry is no stranger to the increasing threat of security breaches. In fact, financial service firms experience cybersecurity attacks 300 times more frequently than businesses in other industries, and that rate is only increasing.1 These organizations must constantly evolve the ways they tackle security, and the rising adoption of SaaS, unified communications as a service and cloud computing, adds yet another list of considerations to the security conversation.
The benefits of services like cloud-based unified communications solutions are clear and essential to providing a great customer experience in an increasingly competitive industry. However, when you consider the amount of sensitive information that can be stored on company systems like phones, voicemail, call recordings, chat and collaboration tools, enlisting a communications provider that has proper security controls in place is more important than ever.
The number of security controls to maintain is significant and far-reaching. It can be difficult enough to ensure your own business abides by these controls, let alone the vendors you work with. The simplest way to ensure your service provider is up to the task is to request their SOC 2 report which will address those security controls and much more.
Financial service firms experience cybersecurity attacks 300 times more frequently than businesses in other industries.
The importance of SOC 2
Developed by the American Institute of CPAs (AICPA), SOC 2 is a comprehensive list of controls governing data protection technologies and processes, covering five key principles: security, availability, processing integrity, confidentiality and privacy. A SOC 2 report can only be provided by an independent third-party CPA firm, ensuring you’re not just taking the service provider at their word. The SOC 2 Type 2 Report audits the implementation, design, and operating effectiveness of these controls over a set time period and puts strict audit requirements in place to address the demands in the marketplace for assurance over non-financial controls.
The completion of such an examination demonstrates the service provider’s commitment to meeting stringent security standards, giving your financial firm the confidence it needs before deciding on a provider. These reports, however, do expire so it is important to find a provider that not only has a current report but plans to continue updating them.
Security breaches will only continue to grow in sophistication, and the valuable data within the financial services industry will always be a prime target. Before selecting a unified communications provider, be sure they are embracing these security standards as part of their current and ongoing strategy.
