93 Compliance blog
The problems compliance is supposed to solve
Each post takes one moment that brings a company to compliance, and says what to do about it this week, with or without us.
RSSSecurity questionnaires · Nov 9, 2026 · 4 min read
A customer sent a security questionnaire. Answer it by Friday, honestly.
A customer sent a security questionnaire with a deadline. How to sort the questions, answer honestly, and send it back on time without overpromising.
Read itSecurity policies · Nov 9, 2026 · 3 min read
Procurement wants your security policies. Write real ones in days.
Procurement wants your information security policies and you have none. Which policies they expect, how to write real ones fast, and how to share them.
Read itSOC 2 and sales · Nov 9, 2026 · 3 min read
A deal stalled on SOC 2. Keep it moving while you start the work.
A buyer wants a SOC 2 report you do not have. What to send now to keep the deal moving, and what starting SOC 2 really involves.
Read itSOC 2 readiness · Nov 9, 2026 · 3 min read
Your first SOC 2 audit is in three months. Find the gaps while you can fix them.
Your first SOC 2 audit is booked and three months away. A month-by-month plan to find gaps, start keeping evidence and walk in prepared.
Read itAudit evidence · Nov 9, 2026 · 3 min read
You did the work but kept no record. Answer the auditor and fix it for next time.
The auditor wants evidence for something your team did and nobody wrote down. How to respond honestly now and make sure it is recorded next time.
Read itPolicy training · Nov 9, 2026 · 3 min read
Your team signed the policies without reading them. Make them listen instead.
A policy acknowledgement proves someone clicked. How to get your team to actually take in your security policies, and keep a record that shows it.
Read itEmployee onboarding · Nov 9, 2026 · 3 min read
Your onboarding lives in one person's head. Turn it into a checklist anyone can run.
When one person knows how to set up new hires, every start date depends on them. How to get the steps out of their head and into a checklist that runs.
Read itProcess drift · Nov 9, 2026 · 3 min read
The team found a better way to work. Make the documents catch up.
Teams change how they work faster than security can update the documents. How to catch the drift, judge the new way, and keep the policy true.
Read itEmployee offboarding · Nov 9, 2026 · 3 min read
Someone left and their Google account still works. Close it today, then fix the process.
Someone left and still has a working Google account. What to do in the Admin console today, and how to make offboarding a checklist so it never slips.
Read itAccess reviews · Nov 9, 2026 · 3 min read
Your policy says quarterly access reviews. Make them small enough to actually do.
Access reviews are in the policy and keep getting skipped. A simple way to run them every quarter in an afternoon and keep the record auditors want.
Read it