Compliance & Regulatory
HIPAA, PCI-DSS, SOC 2, CMMC, FedRAMP, and GDPR guidance for regulated industries.
We Failed Our Security Audit: What to Do Next
Failed a security audit? Here is how to triage the findings, prioritise fixes, communicate with stakeholders and pass the next time.
HIPAA Security Rule vs Privacy Rule: What Is the Difference?
The HIPAA Privacy Rule governs who may use health information; the Security Rule governs how electronic data is protected. Here is what each requires and how they work together.
What Is HIPAA Compliance? A Guide for Healthcare Organisations
HIPAA compliance means protecting patient health information as the law requires. Learn who must comply, what the rules cover, the penalties and how to get started.
How Long Does SOC 2 Certification Take?
SOC 2 Type I takes 2–5 months. Type II takes 7–14 months. This guide explains realistic timelines, what happens at each stage, and what slows the process down.
SOC 2 Type I vs Type II: Which Do You Actually Need?
SOC 2 Type I is faster and cheaper. Type II is what enterprise buyers actually require. This guide explains the real differences and which one your business needs.
What Is SOC 2 Compliance? Everything You Need to Know
SOC 2 is the security audit framework enterprise buyers require before signing contracts. This guide explains the Trust Service Criteria, Type I vs Type II, and what the audit involves.
Ready to Put This Into Practice?
Talk to a GarrisonOne expert — we'll review your setup and tell you exactly where to focus.
