{"id":64,"date":"2025-03-19T16:05:29","date_gmt":"2025-03-19T16:05:29","guid":{"rendered":"http:\/\/admin"},"modified":"2026-02-12T15:48:18","modified_gmt":"2026-02-12T15:48:18","slug":"soc-2-vs-isae-3402","status":"publish","type":"post","link":"https:\/\/risguard.com\/en\/verschil-soc2-en-isae-3402\/","title":{"rendered":"What is the difference between SOC 2 and ISAE 3402?: Which is right for your organization?"},"content":{"rendered":"<div data-elementor-type=\"wp-post\" data-elementor-id=\"64\" class=\"elementor elementor-64\">\n\t\t\t\t<div class=\"elementor-element elementor-element-64ef5344 e-flex e-con-boxed e-con e-parent\" data-id=\"64ef5344\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-567945d5 elementor-widget elementor-widget-text-editor\" data-id=\"567945d5\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t\n<p class=\"wp-block-paragraph\">Organizations that work with sensitive customer data or financial processes must be able to demonstrate that their internal controls are in good order. Two widely used international standards for this purpose are <strong><a href=\"https:\/\/risguard.com\/en\/soc-2-report\/\" data-type=\"page\" data-id=\"1074\">SOC 2<\/a><\/strong> en <strong><a href=\"https:\/\/risguard.com\/en\/soc-1-audit\/\" data-type=\"page\" data-id=\"563\">ISAE 3402<\/a><\/strong>. Although both certifications pertain to internal controls, they differ in key aspects. But what exactly do they mean? And which one is the best fit for your organization?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this article, we dive deep into the differences between <strong>SOC 2 and ISAE 3402<\/strong>, The audit processes and which certification you should choose.<\/p>\n\n\n\n<div class=\"wp-block-stackable-feature stk-block-feature stk-block stk-qc445ao stk-block-background is-style-default\" data-v=\"2\" data-block-id=\"qc445ao\"><style>.stk-qc445ao {--stk-feature-flex-wrap:nowrap !important;border-top-left-radius:var(--stk--preset--border-radius--x-large, 24px) !important;border-top-right-radius:var(--stk--preset--border-radius--x-large, 24px) !important;border-bottom-right-radius:var(--stk--preset--border-radius--x-large, 24px) !important;border-bottom-left-radius:var(--stk--preset--border-radius--x-large, 24px) !important;overflow:hidden !important;border-style:solid !important;border-color:var(--global-palette2, var(--global-palette2)) !important;border-top-width:2px !important;border-right-width:2px !important;border-bottom-width:10px !important;border-left-width:10px !important;padding-top:var(--stk--preset--spacing--none, 0px) !important;padding-right:var(--stk--preset--spacing--none, 0px) !important;padding-bottom:var(--stk--preset--spacing--none, 0px) !important;padding-left:var(--stk--preset--spacing--none, 0px) !important;margin-bottom:0px !important;}.stk-qc445ao-container{min-height:var(--stk--preset--block-height--none, 0px) !important;align-items:center !important;padding-top:var(--stk--preset--spacing--20, 0.44rem) !important;padding-right:var(--stk--preset--spacing--20, 0.44rem) !important;padding-bottom:var(--stk--preset--spacing--20, 0.44rem) !important;padding-left:var(--stk--preset--spacing--20, 0.44rem) !important;display:flex !important;}<\/style><div class=\"stk-content-align stk-qc445ao-column stk-container stk-qc445ao-container stk-hover-parent\"><div class=\"stk-inner-blocks stk-block-content stk-row\">\n<div class=\"wp-block-stackable-column stk-block-column stk-column stk-block stk-wdy9pgc\" data-v=\"4\" data-block-id=\"wdy9pgc\"><style>.stk-wdy9pgc {align-self:center !important;}@media screen and (min-width: 768px){.stk-wdy9pgc {flex:var(--stk-flex-grow, 1) 1 calc(46.19999999999999% - var(--stk-column-gap, 0px) * 1 \/ 2 ) !important;}}<\/style><div class=\"stk-column-wrapper stk-block-column__content stk-container stk-wdy9pgc-container stk--no-background stk--no-padding\"><div class=\"stk-block-content stk-inner-blocks stk-wdy9pgc-inner-blocks\">\n<div class=\"wp-block-stackable-heading stk-block-heading stk-block-heading--v2 stk-block stk-uen9slg\" id=\"hulp-nodig-met-isae-3402-of-soc-2\" data-block-id=\"uen9slg\"><h2 class=\"stk-block-heading__text\">Need help with ISAE 3402 or SOC 2?<\/h2><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Our consultants are happy to help you.<\/p>\n\n\n\n<div class=\"wp-block-stackable-button-group stk-block-button-group stk-block stk-bm9rl52\" data-block-id=\"bm9rl52\"><div class=\"stk-row stk-inner-blocks stk-block-content stk-button-group\">\n<div class=\"wp-block-stackable-button stk-block-button stk-block stk-u98lun4\" data-block-id=\"u98lun4\"><style>.stk-u98lun4 .stk-button{background:var(--global-palette2, var(--global-palette2)) !important;border-top-left-radius:var(--stk--preset--border-radius--large, 16px) !important;border-top-right-radius:var(--stk--preset--border-radius--large, 16px) !important;border-bottom-right-radius:var(--stk--preset--border-radius--large, 16px) !important;border-bottom-left-radius:var(--stk--preset--border-radius--large, 16px) !important;}.stk-u98lun4 .stk-button:before{border-color:#ffffff !important;}.stk-u98lun4 .stk-button__inner-text{color:var(--global-palette8, var(--global-palette8)) !important;font-weight:500 !important;}<\/style><a class=\"stk-link stk-button stk--hover-effect-darken\" href=\"https:\/\/risguard.com\/en\/contact\/\"><span class=\"has-text-color stk-button__inner-text\">Contact us<\/span><\/a><\/div>\n<\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n<div class=\"wp-block-stackable-column stk-block-column stk-column stk-block stk-64xhv89\" data-v=\"4\" data-block-id=\"64xhv89\"><style>.stk-64xhv89 {align-self:center !important;}.stk-64xhv89-container{max-width:1500px !important;min-width:auto !important;}@media screen and (min-width: 768px){.stk-64xhv89 {flex:var(--stk-flex-grow, 1) 1 calc(53.80000000000001% - var(--stk-column-gap, 0px) * 1 \/ 2 ) !important;}}<\/style><div class=\"stk-column-wrapper stk-block-column__content stk-container stk-64xhv89-container stk--no-background stk--no-padding\"><div class=\"stk-block-content stk-inner-blocks stk-64xhv89-inner-blocks\">\n<div class=\"wp-block-stackable-image stk-block-image has-text-align-center stk-block stk-2gadqsu\" data-block-id=\"2gadqsu\"><style>.stk-2gadqsu .stk-img-wrapper{width:100% !important;height:229px !important;}.stk-2gadqsu .stk-img-wrapper img{border-radius:5px !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch\"><img fetchpriority=\"high\" decoding=\"async\" class=\"stk-img wp-image-144\" src=\"https:\/\/risguard.com\/wp-content\/uploads\/2025\/03\/20250207-Risguard-96-2.jpg\" width=\"1600\" height=\"1067\" srcset=\"https:\/\/risguard.com\/wp-content\/uploads\/2025\/03\/20250207-Risguard-96-2.jpg 1600w, https:\/\/risguard.com\/wp-content\/uploads\/2025\/03\/20250207-Risguard-96-2-300x200.jpg 300w, https:\/\/risguard.com\/wp-content\/uploads\/2025\/03\/20250207-Risguard-96-2-1024x683.jpg 1024w, https:\/\/risguard.com\/wp-content\/uploads\/2025\/03\/20250207-Risguard-96-2-768x512.jpg 768w, https:\/\/risguard.com\/wp-content\/uploads\/2025\/03\/20250207-Risguard-96-2-1536x1024.jpg 1536w\" sizes=\"(max-width: 1600px) 100vw, 1600px\" \/><\/span><\/figure><\/div>\n<\/div><\/div><\/div>\n<\/div><\/div><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What is SOC 2?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SOC 2 (System and Organization Controls 2) is an audit framework that focuses on the security, availability, and confidentiality of customer data. This is assessed based on the <strong>Trust Services Criteria<\/strong>, which consist of:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Security<\/strong><\/li>\n\n\n\n<li><strong>Availability<\/strong><\/li>\n\n\n\n<li><strong>Processing Integrity<\/strong><\/li>\n\n\n\n<li><strong>Confidentiality<\/strong><\/li>\n\n\n\n<li><strong>Privacy<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">SOC 2 is often used by technology companies, SaaS providers, and cloud providers to prove to customers that their data is well-protected.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>There are two types of SOC 2 reports:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li><strong>SOC 2 Type I<\/strong> A snapshot of internal controls on a specific date.<\/li>\n\n\n\n<li><strong>SOC 2 Type II:<\/strong> An evaluation of the effectiveness of controls over a specific period (usually 6 to 12 months).<\/li>\n<\/ol>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What is ISAE 3402?<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">ISAE 3402 (International Standard on Assurance Engagements 3402) is an auditing standard that focuses on the internal controls of financial processes in outsourced operations. It is primarily intended for companies that provide services to other companies, such as payroll companies and IT service providers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Just like SOC 2, ISAE 3402 has two report types:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>ISAE 3402 Type I:<\/strong> Reviews the design of controls at a specific time.<\/li>\n\n\n\n<li><strong>ISAE 3402 Type II:<\/strong> Investigates whether the controls have been effective over a given period.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This certification is often required by financial institutions, auditors and companies responsible for sensitive financial processes. This certification is often required by financial institutions, auditors and companies responsible for sensitive financial processes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Key Differences Between SOC 2 and ISAE 3402<\/strong><\/h2>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th><strong>Feature<\/strong><\/th><th><strong>SOC 2<\/strong><\/th><th><strong>ISAE 3402<\/strong><\/th><\/tr><\/thead><tbody><tr><td><strong>Goal<\/strong><\/td><td>Customer Data Protection<\/td><td>Financial risk management in outsourcing<\/td><\/tr><tr><td><strong>Area of focus<\/strong><\/td><td>Security, availability, and privacy<\/td><td>Internal controls for financial processes<\/td><\/tr><tr><td><strong>Branch<\/strong><\/td><td>IT, SaaS, Cloud Companies<\/td><td>Financial service providers, accountants<\/td><\/tr><tr><td><strong>Report types<\/strong><\/td><td>Type I and Type II<\/td><td>Type I and Type II<\/td><\/tr><tr><td><strong>Auditing Standard<\/strong><\/td><td>AICPA (American)<\/td><td>IFAC (International)<\/td><\/tr><tr><td><strong>Customer focus<\/strong><\/td><td>Focused on customers and partners<\/td><td>Targeted at supervisors and auditors<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Which certification is right for your organization?<\/strong><\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Choose SOC 2<\/strong> If you are a technology company, SaaS provider, or cloud provider and want to demonstrate that you are protecting customer data well.<\/li>\n\n\n\n<li><strong>Choose ISAE 3402<\/strong> when you perform financial processes for clients and need to prove that your internal control meets the requirements of accountants and regulators.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Costs and duration of certification<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The costs and duration of SOC 2 and ISAE 3402 vary depending on your organization's complexity. Generally speaking:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>SOC 2 Type I<\/strong>\u20ac20,000 \u2013 \u20ac50,000, lasts 3\u20136 months<\/li>\n\n\n\n<li><strong>SOC 2 Type II<\/strong>\u20ac50,000 \u2013 \u20ac100,000, lasts 6-12 months<\/li>\n\n\n\n<li><strong>ISAE 3402 Type I<\/strong>\u20ac25,000 \u2013 \u20ac60,000, lasts 3-6 months<\/li>\n\n\n\n<li><strong>ISAE 3402 Type II<\/strong>\u20ac60,000 - \u20ac150,000; lasts 6-12 months<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Frequently Asked Questions about SOC 2 and ISAE 3402<\/strong><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">1. <strong>Is SOC 2 mandatory?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No, but many clients require it as proof that you handle their data securely.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">2. <strong>Is ISAE 3402 only for financial companies?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">No, IT service providers and HR service providers also use ISAE 3402.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">3. <strong>How often should I do an audit?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Usually annually to keep certification valid.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">4. <strong>Can a company have both SOC 2 and ISAE 3402?<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Yes, some companies meet both standards if they manage both IT security and financial processes.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Conclusion<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SOC 2 and ISAE 3402 serve different purposes, but both certifications enhance trust in your organization. Choose the standard that best aligns with your industry and clients.<\/p>\n\n\n<div class=\"cfcf7-block-container\"><div style=\"--cfcf7-block-bg:var(--global-palette2);--cfcf7-block-line-height:1.4em;--cfcf7-block-font-size:16px;--cfcf7-block-padding-top:2em;--cfcf7-block-padding-sides:3em;--cfcf7-block-padding-bottom:2em;--cfcf7-block-margin-top:0em;--cfcf7-block-margin-sides:0em;--cfcf7-block-margin-bottom:0em;--cfcf7-block-radius:2em;--cfcf7-block-radius-top-left:2em;--cfcf7-block-radius-top-right:2em;--cfcf7-block-radius-bottom-left:2em;--cfcf7-block-radius-bottom-right:2em;--cfcf7-block-shadow:0em 0.5em 5em -3em black;--cfcf7-block-border-style:none;--cfcf7-block-border-width:0;--cfcf7-block-border-color:black;background-color:var(--cfcf7-block-bg);line-height:var(--cfcf7-block-line-height) !important;font-size:var(--cfcf7-block-font-size);padding-top:var(--cfcf7-block-padding-top);padding-left:var(--cfcf7-block-padding-sides);padding-right:var(--cfcf7-block-padding-sides);padding-bottom:var(--cfcf7-block-padding-bottom);margin-top:var(--cfcf7-block-margin-top);margin-left:var(--cfcf7-block-margin-sides);margin-right:var(--cfcf7-block-margin-sides);margin-bottom:var(--cfcf7-block-margin-bottom);border-top-left-radius:var(--cfcf7-block-radius-top-left, var(--cfcf7-block-radius, 0));border-top-right-radius:var(--cfcf7-block-radius-top-right, var(--cfcf7-block-radius, 0));border-bottom-left-radius:var(--cfcf7-block-radius-bottom-left, var(--cfcf7-block-radius, 0));border-bottom-right-radius:var(--cfcf7-block-radius-bottom-right, var(--cfcf7-block-radius, 0));box-shadow:var(--cfcf7-block-shadow);border-style:var(--cfcf7-block-border-style);border-width:var(--cfcf7-block-border-width);border-color:var(--cfcf7-block-border-color)\" class=\"cfcf7-block cfcf7-instance-2 wp-block-mofistudio-customizer-block-cf7\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f5-o2\" lang=\"nl-NL\" dir=\"ltr\" data-wpcf7-id=\"5\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/64#wpcf7-f5-o2\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact Form\" novalidate=\"novalidate\" data-status=\"init\" data-trp-original-action=\"\/en\/wp-json\/wp\/v2\/posts\/64#wpcf7-f5-o2\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"5\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.2.2\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"nl_NL\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f5-o2\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/>\n<\/fieldset>\n<p><label> Your name<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required\" autocomplete=\"name\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span> <\/label>\n<\/p>\n<p><label> Phone<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-phone\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-tel wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-tel\" autocomplete=\"tel\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"tel\" name=\"your-phone\" \/><\/span> <\/label>\n<\/p>\n<p><label> My email address<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email\" autocomplete=\"email\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"email\" name=\"your-email\" \/><\/span> <\/label>\n<\/p>\n<p><label> Your message (optional)<br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"your-message\"><textarea cols=\"40\" rows=\"10\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea\" aria-invalid=\"false\" name=\"your-message\"><\/textarea><\/span> <\/label>\n<\/p>\n<p><input class=\"wpcf7-form-control wpcf7-submit has-spinner\" type=\"submit\" value=\"Send\" \/>\n<\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<input type=\"hidden\" name=\"trp-form-language\" value=\"en\"\/><\/form>\n<\/div>\n<\/div><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-77caa23 e-grid e-con-boxed e-con e-parent\" data-id=\"77caa23\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-037a979 elementor-widget elementor-widget-text-editor\" data-id=\"037a979\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>Want to know more about the difference between SOC 2 and ISAE 3402? Follow our social media.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-266fa6d elementor-shape-rounded elementor-grid-0 e-grid-align-center elementor-widget elementor-widget-social-icons\" data-id=\"266fa6d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"social-icons.default\">\n\t\t\t\t\t\t\t<div class=\"elementor-social-icons-wrapper elementor-grid\" role=\"list\">\n\t\t\t\t\t\t\t<span class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t<a class=\"elementor-icon elementor-social-icon elementor-social-icon-youtube elementor-repeater-item-6249bbf\" href=\"https:\/\/www.youtube.com\/@Risguard_Europe\" target=\"_blank\" rel=\"noopener\">\n\t\t\t\t\t\t<span class=\"elementor-screen-only\">YouTube<\/span>\n\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fab-youtube\" viewbox=\"0 0 576 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M549.655 124.083c-6.281-23.65-24.787-42.276-48.284-48.597C458.781 64 288 64 288 64S117.22 64 74.629 75.486c-23.497 6.322-42.003 24.947-48.284 48.597-11.412 42.867-11.412 132.305-11.412 132.305s0 89.438 11.412 132.305c6.281 23.65 24.787 41.5 48.284 47.821C117.22 448 288 448 288 448s170.78 0 213.371-11.486c23.497-6.321 42.003-24.171 48.284-47.821 11.412-42.867 11.412-132.305 11.412-132.305s0-89.438-11.412-132.305zm-317.51 213.508V175.185l142.739 81.205-142.739 81.201z\"><\/path><\/svg>\t\t\t\t\t<\/a>\n\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<span class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t<a class=\"elementor-icon elementor-social-icon elementor-social-icon-linkedin elementor-repeater-item-8aec909\" href=\"https:\/\/nl.linkedin.com\/company\/risguard\" target=\"_blank\" rel=\"noopener\">\n\t\t\t\t\t\t<span class=\"elementor-screen-only\">LinkedIn<\/span>\n\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fab-linkedin\" viewbox=\"0 0 448 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M416 32H31.9C14.3 32 0 46.5 0 64.3v383.4C0 465.5 14.3 480 31.9 480H416c17.6 0 32-14.5 32-32.3V64.3c0-17.8-14.4-32.3-32-32.3zM135.4 416H69V202.2h66.5V416zm-33.2-243c-21.3 0-38.5-17.3-38.5-38.5S80.9 96 102.2 96c21.2 0 38.5 17.3 38.5 38.5 0 21.3-17.2 38.5-38.5 38.5zm282.1 243h-66.4V312c0-24.8-.5-56.7-34.5-56.7-34.6 0-39.9 27-39.9 54.9V416h-66.4V202.2h63.7v29.2h.9c8.9-16.8 30.6-34.5 62.9-34.5 67.2 0 79.7 44.3 79.7 101.9V416z\"><\/path><\/svg>\t\t\t\t\t<\/a>\n\t\t\t\t<\/span>\n\t\t\t\t\t\t\t<span class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t<a class=\"elementor-icon elementor-social-icon elementor-social-icon-spotify elementor-repeater-item-3b69f72\" href=\"https:\/\/open.spotify.com\/show\/7pmOisUZutntXpGhpZ4tHY\" target=\"_blank\" rel=\"noopener\">\n\t\t\t\t\t\t<span class=\"elementor-screen-only\">Spotify<\/span>\n\t\t\t\t\t\t<svg aria-hidden=\"true\" class=\"e-font-icon-svg e-fab-spotify\" viewbox=\"0 0 496 512\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\"><path d=\"M248 8C111.1 8 0 119.1 0 256s111.1 248 248 248 248-111.1 248-248S384.9 8 248 8zm100.7 364.9c-4.2 0-6.8-1.3-10.7-3.6-62.4-37.6-135-39.2-206.7-24.5-3.9 1-9 2.6-11.9 2.6-9.7 0-15.8-7.7-15.8-15.8 0-10.3 6.1-15.2 13.6-16.8 81.9-18.1 165.6-16.5 237 26.2 6.1 3.9 9.7 7.4 9.7 16.5s-7.1 15.4-15.2 15.4zm26.9-65.6c-5.2 0-8.7-2.3-12.3-4.2-62.5-37-155.7-51.9-238.6-29.4-4.8 1.3-7.4 2.6-11.9 2.6-10.7 0-19.4-8.7-19.4-19.4s5.2-17.8 15.5-20.7c27.8-7.8 56.2-13.6 97.8-13.6 64.9 0 127.6 16.1 177 45.5 8.1 4.8 11.3 11 11.3 19.7-.1 10.8-8.5 19.5-19.4 19.5zm31-76.2c-5.2 0-8.4-1.3-12.9-3.9-71.2-42.5-198.5-52.7-280.9-29.7-3.6 1-8.1 2.6-12.9 2.6-13.2 0-23.3-10.3-23.3-23.6 0-13.6 8.4-21.3 17.4-23.9 35.2-10.3 74.6-15.2 117.5-15.2 73 0 149.5 15.2 205.4 47.8 7.8 4.5 12.9 10.7 12.9 22.6 0 13.6-11 23.3-23.2 23.3z\"><\/path><\/svg>\t\t\t\t\t<\/a>\n\t\t\t\t<\/span>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Organizations that handle sensitive customer data or financial processes must be able to demonstrate that their internal controls are in good order. Two commonly used international standards for this purpose are SOC 2 and ISAE 3402. Although both certifications relate to internal controls, they differ in important ways. But what do they mean exactly? And which one fits...<\/p>","protected":false},"author":2,"featured_media":579,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_kad_post_transparent":"","_kad_post_title":"","_kad_post_layout":"","_kad_post_sidebar_id":"","_kad_post_content_style":"","_kad_post_vertical_padding":"","_kad_post_feature":"","_kad_post_feature_position":"","_kad_post_header":false,"_kad_post_footer":false,"_kad_post_classname":"","footnotes":""},"categories":[1],"tags":[10,9,8,7,11],"class_list":["post-64","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-niet-gecategoriseerd","tag-isae-3402","tag-isae3402","tag-soc-2","tag-soc2","tag-verschil-soc2-en-isae3402"],"_links":{"self":[{"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/posts\/64","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/comments?post=64"}],"version-history":[{"count":7,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/posts\/64\/revisions"}],"predecessor-version":[{"id":1976,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/posts\/64\/revisions\/1976"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/media\/579"}],"wp:attachment":[{"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/media?parent=64"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/categories?post=64"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/risguard.com\/en\/wp-json\/wp\/v2\/tags?post=64"}],"curies":[{"name":"WP","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}