800-214-0957 info@blackbottleit.com

The 3 Why, What and When of SOC 2

Security threats have never been more creative or prevalent than they are today! Your business is differentiated from its competitors by its commitment to sound security practices and the ability to demonstrate those practices. 

SOC 2 (System and Organization Controls 2) is the industry-leading standard to demonstrate the design and operating effectiveness of your security, risk, and control practices. 

Cybersecurity consultants are crucial in assisting businesses with SOC 2 compliance by providing expertise, guidance, and support throughout the compliance process. Independent auditors are prepping and reviewing compliance readiness and a checklist, but your organization may need cybersecurity professionals to implement the required controls.  


Why Cybersecurity Professionals 

Your business will require professionals to do the heavy listing. SOC 2 is not just a checklist. Here is what to expect: 

  • Assessment and Gap Analysis: Consultants can conduct an initial assessment of your organization’s current security posture and compare it against SOC 2 requirements. This helps identify gaps and areas where improvements are needed to meet compliance standards. 
  • Policy and Procedure Development: Consultants can help develop and document policies, procedures, and controls necessary for SOC 2 compliance. This includes security policies, access control procedures, incident response plans, and more. 
  • Technical Controls Implementation: Consultants can assist in implementing technical controls and security measures required for SOC 2 compliance. This may involve configuring network security, encryption, access controls, logging and monitoring systems, and other security technologies. 
  • Risk Management: Consultants can help identify and assess security risks specific to your organization and develop strategies to mitigate these risks effectively. This includes conducting risk assessments, vulnerability scans, and penetration testing. 
  • Training and Awareness: Consultants can provide training sessions and awareness programs to educate employees about security best practices and their roles in maintaining SOC 2 compliance. This ensures that everyone in the organization understands their responsibilities and contributes to the security efforts. 
  • Vendor Management: If your business relies on third-party vendors or service providers, consultants can help assess their security practices and ensure they meet SOC 2 requirements. This includes reviewing vendor contracts, conducting due diligence assessments, and monitoring vendor compliance. 
  • Preparation for Audits: Consultants can prepare your organization for SOC 2 audits by conducting mock audits, reviewing documentation, and helping address any issues identified during pre-audit assessments. This ensures that your organization is well-prepared and confident when facing an official audit. 
  • Continuous Monitoring and Improvement: SOC 2 compliance is an ongoing process, and consultants can provide support for continuous monitoring, review, and improvement of security controls to maintain compliance over time. This includes regular assessments, updates to policies and procedures, and adapting to changes in regulatory requirements. 


What Businesses Need SOC 2

Any organization that handles sensitive customer data should align with a compliance framework like SOC 2 and demonstrate adequate controls to ensure this data’s security, availability, processing integrity, confidentiality, and privacy. SOC 2 provides an auditable compliance framework to attest to your organization’s compliance and demonstrate that your cyber controls are in place. It’s becoming commonplace that new businesses and vendors require SOC 2.

Examples of entities that must comply with SOC 2 requirements include: 

  • Cloud service providers: Companies that offer cloud computing services, including Infrastructure as a Service (IaaS), Platform as a Service (PaaS), and Software as a Service (SaaS) providers. 
  • Data centers: Facilities that host servers, networking equipment, and other IT infrastructure for organizations. 
  • Software as a Service (SaaS) providers: Companies that offer software applications accessed via the Internet and hosted on their servers. 
  • Payment processors: Organizations that handle credit card transactions and other financial data. 
  • Healthcare service providers: Entities that handle protected health information (PHI) and other sensitive medical data. 
  • Finance & Professional Services: Banks, credit unions, CPAs, tax prep, payroll companies, investment firms, and other providers that handle customer financial and personal data
  • Online retailers: E-commerce websites that collect and store customer payment information and personal data. 


When Do I Need to Start SOC 2 

When Do I Need to Start SOC 2: It is a silly question or rhetorical question. When do you want to close more deals, grow revenue, and maintain a competitive advantage? There are, however, seven phases or steps to achieve and report on SOC 2 compliance with the AICPA Trust Services Criteria. 


  • Step 1: Contact a SOC 2 Provider 
  • Step 2: SOC 2 Service Auditor & Approach 
  • Step 3: SOC 2 Readiness Assessment 
  • Step 4: Audit 
  • Step 5: SOC 2 System Description 
  • Step 6: Report Issuance 


When you are ready to get started, Black Bottle IT will be ready to help your business with the heavy lifting. While the actual SOC 2 audit typically takes between five weeks to three months, meeting the criteria in the SOC 2 Readiness Assessment will depend on factors like the scope of your audit and the number of controls involved. 

Going Beyond Boundaries. The Need to Define Access Controls   

Going Beyond Boundaries. The Need to Define Access Controls   

It is about that time of year when employees submit for their vacation. Will you allow them to take their work computer on vacation? There are two obvious reasons not to allow their workbag to travel with them. Vacations are a time for rest, relaxation, and spending time with friends and families. Second, a work computer undoubtedly contains sensitive information. A leak of any sensitive information in or out could be catastrophic to your organization.   

What are Access Controls?  

Access controls are security measures or ‘boundaries’ that regulate who can access specific resources, such as data, systems, or physical locations, what actions they can perform when they have access, and where they can access.  “Good access control rules around your tenant” specifically means that your organization must limit “who can access the account, from where, and from what device.”  

As in the illustration, access controls can limit where systems can be accessed by specific machines and even by allowed business hours. So, if a bad actor is trying to access critical systems from outside the normal geography of business (e.g., outside the U.S.), during odd times of the day (e.g., 2:00 a.m.), access would be blocked. This type of control protects sensitive data if credentials are compromised.  

It is important to define where company employees access systems, from what machines, and during what times of the day. If employees are doing work outside of these controls, develop a process for requesting temporary access, for example, working from the beach, and set the beginning and ending timeframes to remove access from these temporary situations.


Why Access Controls?  

Reducing the attack surface: Limiting access to systems and data reduces the potential attack surface for cybercriminals. Even if a malicious actor gains access to login credentials,  part of access controls can prevent them from compromising systems.

There is a lot at stake in addition to protecting sensitive data. Access controls ensure that only authorized users have access to sensitive information. While the experts at Black Bottle IT are focused on cybersecurity and limiting the potential for a cyber incident, when you limit geography, machine, and time systems can be accessed, you also reduce the risk of human errors that cause lost data.   


Three Reasons Why Access Controls Are Fundamental 

Compliance requirements: Many industries have strict regulations governing the protection of sensitive data, such as HIPAA in healthcare or GDPR in the European Union. Implementing access controls helps organizations comply with these regulations by demonstrating that they have measures to safeguard data.

Detecting and responding to security incidents: Access controls can also help detect and respond to security incidents. Organizations can identify suspicious activity and respond promptly to potential threats by logging access attempts and monitoring user behavior.  

Maintaining business continuity: Cybersecurity incidents can disrupt business operations and lead to significant financial losses. Access controls help maintain business continuity by minimizing the impact of security breaches and ensuring that critical systems and data remain protected. 


What Your Organization Must Do to Protect Company Data  

  • Heighten Cybersecurity Awareness & Phishing Training    
  • Enforce Access Controls around all cloud-based tools, i.e., AWS, Google Workspace, QuickBooks Online, Microsoft Office 365   
  • Lock down the Administrative Account to a specific IP address  
  • Monitor Tenants 24×7 — multiple organizations or individuals, referred to as “tenants,” share the same computing infrastructure, resources, and services  
  • Continuous monitoring is crucial for promptly detecting and responding to security threats and incidents as they occur, minimizing the potential impact on tenants’ data and systems.  


Remember: Heightening cybersecurity controls, like access controls, does not indefinitely prevent a cybercriminal from gaining access but makes it more difficult.   

Everyone deserves a vacation. We have you covered.  Contact us today for more information and how to get started with access controls. blackbottleit.com/contact-us.

The More Cybersecurity Changes The More it Remains the Same

The More Cybersecurity Changes The More it Remains the Same

“The more things change, the more they stay the same” means that despite apparent changes or advancements, certain fundamental aspects or patterns remain unchanged over time. One could relate this to cybersecurity.

  • Cyberattacks cost impacted organizations thousands, if not millions, of dollars.
  • Cybersecurity is a critical element of homeland security after 9-11.
  • Ransomware and phishing have always been pervasive.
  • Since on-premise storage still exists for some businesses, despite the rise of cloud computing, monitoring and protecting data will remain an important part of any security execution plan.

Gartner reports that 85% of organizations will embrace a cloud-first principle by 2025 and will not be able to fully execute their digital strategies without the use of cloud-native architectures and technologies. (May 2023)

Three Key Cybersecurity Focal Points that Will Remain the Same for Foreseeable Future

Rise in Cybersecurity Regulations:

Governments and regulatory bodies were expected to enhance and introduce new cybersecurity regulations to address the evolving threat landscape and protect sensitive data.

Focus on Cloud Security:

With the increasing adoption of cloud services, there was a growing emphasis on securing cloud environments. This includes implementing robust identity and access management, encryption, and monitoring.

Enhanced Endpoint Security:

As remote work became more prevalent, securing endpoints (devices used by employees) gained importance. Endpoint detection and response (EDR) solutions were expected to evolve.


This year, we will learn more about AI and machine learning techniques to improve response efficiency.

Black Bottle IT is focused on keeping data secure, which, in turn, will keep your business operational and competitive.  Please reach out if you want to outsource your organization’s cybersecurity function!  Contact us today. 

The Difference Between Passwords, Fingerprint, MFA

The Difference Between Passwords, Fingerprint, MFA

How Likely will Your Business be Compromised without MFA?


MFA: strengthens your security posture and protects you from phishing attempts and compromised passwords.

According to Microsoft, your business is 99% less likely to get hacked with MFA implemented.

October is Cybersecurity Awareness Month, and the ideal time to implement MFA.

When we hear that MFA is annoying, expensive or not secure, our answer is, “Is a breach not more annoying as it will most likely shut down your business for a period of time, costing your business thousands of dollars  And, how’s about your reputation with customers?”

Black Bottle IT offers MFA as part of our comprehensive solution to make implementing it fast, easy, and cost-effective for organizations of all sizes. We aim to make MFA easy and affordable so that it becomes pervasive and every organization can benefit from the added protection.

Talk with an Expert!


Where do Cyberattacks Start

Where do Cyber Attacks Start? 

Cyberattacks can happen on any device at any given time, so how do you know which devices to protect your clients on? Well, to understand this, it will help to understand where these attacks come from.

In the past, all attacks came from outside sources, or, in other words, the internet. Cybersecurity companies combatted these attacks by setting up firewalls, IDS, and IPS systems to block any incoming attacks. Anti-virus software also became a reliable program to trust; however, these methods are outdated. Now, attacks can take place just about anywhere.

The malware that hackers now use is encrypted to the point that they are essentially invisible to firewalls and IDS systems. Historically, these edge devices acted as the first line of defense, protecting the network from outside threats, but this is no longer the case. The line of devices that attackers needed to penetrate before they could make a serious breach is no longer a concern to hackers.


4 Most Common Cyberthreats!

Black Bottle IT - 4 Most Common Cyberthreats

Just as military tactics and weapons continue to advance, so do the methods of cyber threats. With these advancements, cyber attackers have devised multiple ways to bypass edge protection and gain direct access from inside the network. This is made possible through email phishing, accidentally entering an incorrect site, allowing your kids to play games on unsecured websites, and more. 

Your Network is Vulnerable 

While networks are still organized from edge devices to wireless access points, and then to servers and personal devices, these advanced malware attacks ignore the line of defense that once proved competent. Companies do not realize that attacks can take place from within their network. In fact, many companies still rely on firewalls and anti-virus software. This is not enough. Rather than simple edge protection, companies need cybersecurity solutions that give them full coverage. 
With solutions from a reliable cybersecurity company, when an attack is made — no matter where it is coming from — the company is notified immediately, and the attack can be isolated before it spreads. This combination gives companies a centralized security system with all the necessary assistance. 

Let’s Get Started

If your clients have any problems with their cybersecurity products, contact us to learn more about how we can help you.  

What Managed IT Solution is Best for Your Business?

What Managed IT Solution is Best for Your Business?

What Managed IT Solution is Best for Your Business?


When engaging Companies, our team here at Black Bottle IT receives many questions about what tools and services are right for their business. But, there is one question Black Bottle IT frequently gets, “what solutions would you recommend to us?” The answer isn’t simple. There is no “silver bullet” that cures all cybersecurity risks.

To simplify, when looking for a cybersecurity solution, typically companies fall into three categories:


1. Companies that recognize the need to upgrade security solutions and HAVE in-house technical talent:

In this scenario, Black Bottle IT will advise the Company on the right security solutions to fit its situation. Once the solutions are selected, Black Bottle IT will help implement and craft the correct policies and procedures to govern the new processes. This activity is typically done side by side with the in-house talent to hand off 100% of the operations back to the Company’s technical team. Post implementation, we strategically advise, when necessary, as the ever-changing security threat landscape changes with new solutions to keep pace.


2. Companies that recognize the need to upgrade security solutions and DO NOT HAVE in-house technical talent:

These businesses are our favorite Companies to consult with at Black Bottle IT. Business leadership is savvy enough to understand the risk a cyber attack poses and knows the Company doesn’t have enough in-house talent to find, implement and manage the necessary solutions. Cybersecurity talent is hard to find, and most SMB businesses do not have the budget for a dedicated security team. In these instances, Black Bottle IT will recommend, implement and manage a security solution that meets the Company’s needs and reduces their risk of a cyber attack. Going forward, Black Bottle IT will act as advisors and part of the technology team.

3. Companies that may not understand their cyber risk and need some education:

Part of our mission is to inform Companies of the risk a cyber attack can have on their business. In these conversations, we provide industry information, statistics, case studies relevant to the Companies industry. Our goal is to make sure leadership knows the risk. Ultimately, we want to help them and gain them as a client, but the reality is, most Companies that fall into this category need time to digest the information and then quickly realize they need to address the risk. Implementation of solutions will start with low-hanging fruit, as the Company plans and budgets for future improvements.

How can we help your business?  There is always a go-forward plan that is right for you, your business, and your stakeholders. 

Contact Black Bottle IT today to learn more.