CHICAGO--(BUSINESS WIRE)--InRule®, provider of the industry-leading decision platform, today announced that the company has undergone a System and Organization Controls (SOC) 2SM examination resulting in a CPA’s report attesting that the management of InRule maintained effective controls over the security, availability, processing integrity, and confidentiality of its operations and solution. The engagement was performed by BARR Advisory, P.A.
A SOC 2SM report is designed to meet the needs of existing or potential customers who need assurance about the effectiveness of controls at a service organization that are relevant to the security, availability, confidentiality, privacy, or processing integrity of the system used by the service organization to process or store customers' information.
“Our SOC 2 Type II attestation demonstrates that we have the appropriate controls in place to mitigate risks related to security, availability, confidentiality, and processing integrity,” said InRule Co-Founder and Chief Executive Officer Rik Chomko. “This milestone underscores our promise to our customers that we value their data and are committed to protecting it.”
The SOC 2 Type II guidelines are set forth by American Institute of Certified Public Accountants (AICPA). It's widely recognized as the standard for data security. It requires that companies establish and follow rigorous data security policies and procedures.
The following principles and related criteria have been developed by the American Institute of CPAs (AICPA) and the Canadian Institute of Chartered Accountants (CICA) for use by practitioners in the performance of trust services engagements:
- Security - The system is protected against unauthorized access (both physical and logical).
- Availability - The system is available for operation and use as committed or agreed.
- Confidentiality - Information designated as confidential is protected as committed or agreed.
- Processing Integrity - System processing is complete, accurate, timely and authorized.
A SOC 2SM report is an internal control report on the services provided by a service organization to its customers and provides valuable information that existing and potential customers of the service organization need to assess and address the risks associated with an outsourced service.
To learn more about InRule’s information security practices, please visit: https://www.inrule.com/security/
About BARR Advisory
BARR Advisory is a cloud-based security and compliance solutions provider, specializing in cybersecurity and compliance for Software as a Service (SaaS) companies. A trusted advisor to some of the fastest growing cloud-based organizations around the globe, BARR simplifies compliance across multiple regulatory and customer requirements in highly regulated industries including technology, financial services, healthcare, and government.
BARR Advisory services include:
- Compliance Program Assistance
- SOC 1 Examinations
- SOC 2 and 3 Examinations
- SOC for Cybersecurity
- PCI DSS Assessment Services
- ISO 27001 Assessments
- FedRAMP Security Assessments
- HIPAA, HITECH, and HITRUST Services
- Penetration Testing and Vulnerability Assessments
- Virtual CISO services
Learn more at barradvisory.com.
About InRule Technology®
InRule Technology® enables enterprises to understand and automate decisions with unparalleled speed, agility, accuracy and transparency. IT and business personnel rely on InRule’s Decision Platform to increase productivity, grow revenue and enhance customer service. With its ‘author first’ approach, InRule empowers both technical and business rule authors to write and manage rules. From on-premises, to the cloud and via mobile, InRule allows organizations to run rules anywhere for extreme flexibility and scalability. More than 400 InRule User Community members depend on InRule to reduce development and change cycles by 90 percent for their mission critical systems and customer-facing applications. InRule has been delivering measurable business and IT results in high-performance environments since 2002. For more information visit www.inrule.com.
Follow InRule on Twitter @InRule and LinkedIn. Read the blog at www.inrule.com/resources/blog.