Audit Readiness

Resources to help you confidently prep for audits and compliance attestations

Compliance Standards Library

FedRAMP
What is FedRAMP? Federal Risk and Authorization Management Program is a program that stan...
Vanta and HITRUST MyCSF API Integration
Overview The Vanta and HITRUST MyCSF integration provides a seamless connection between Van...
FedRAMP r5 Control Sets
Frameworks Control Sets A controls set is a collection of security controls designed to hel...
Migrating from FedRAMP v4 to v5
What does this mean for Vanta users? With the release of FedRAMP v5, organizations must tr...
Framework Control Sets (CIS: Center of Internet Security)
Frameworks Control Sets A control set is a collection of security controls designed to help...
Understanding the Differences Between NIST CSF 1.1 and 2.0
What is the NIST Cybersecurity Framework (CSF)? The NIST Cybersecurity Framework (CSF) pro...

SOC 2: Year Two Security Tasks
You can set the frequency of these reviews, but we recommend conducting them at least quart...
Device Monitoring in Vanta
What is device monitoring? To build a strong security and compliance foundation, organizati...
Background Checks in Vanta
What are background checks? A background check is a process through which employers leverag...
Frequently Asked Questions: Audits
What is the difference between a Type 1 vs a Type 2 audit? A SOC 2 Type I report evaluates...
Missing information on Access Page for HubSpot
Administrators may notice that the Role, MFA, Created, and Deactivated columns have a '-' r...
Vanta Guide to SOC 2: Type I & Type II
My company is getting a SOC 2. But how do we decide between a SOC 2 Type I or Type II? Con...

Audit Readiness Checklist
Your Audit Readiness Checklist The Vanta team has supported companies through thousands of...
Global Task Sets Settings
Accessing Task Sets Settings Select Personnel from the left-hand navigation panel, follow...
Vanta Onboarding Checklists
Compliance Checklists New to Vanta? Use these checklists to help get you started! The U...