{"id":494704,"date":"2024-01-30T14:05:05","date_gmt":"2024-01-30T13:05:05","guid":{"rendered":"https:\/\/www.devoteam.com\/success-story\/techwolfs-journey-to-soc2-compliance\/"},"modified":"2025-04-11T10:37:21","modified_gmt":"2025-04-11T08:37:21","slug":"techwolfs-journey-to-soc2-compliance","status":"publish","type":"success-story","link":"https:\/\/devoteam.info\/en-pt\/success-story\/techwolfs-journey-to-soc2-compliance\/","title":{"rendered":"TechWolf’s Journey to SOC2 Compliance"},"content":{"rendered":"\n

TechWolf – Skills Intelligence Platform<\/h2>\n\n\n\n

TechWolf, a Belgian-based company with an additional office in the UK, helps enterprises establish an automatic, instant and always up-to-date Skills Intelligence. TechWolf\u2019s Skills Intelligence Platform provides enterprises with a fast track to adopting a skills-based talent model. Its AI technology gives organisations an instant overview of skills and skill gaps across their workforce.
Skills-based organisations (SBOs) need reliable information about people\u2019s evolving competencies. Collecting and maintaining skill data is a struggle for most HR departments, and the results tend to be fragmented and quickly outdated. Let’s take a look at Techwolf’s Journey to SOC2 Compliance.<\/p>\n\n\n\n

The Challenge <\/h2>\n\n\n\n

Access is no longer limited to your office or your employees. Meaning companies can no longer rely on physical barriers to protect their information or to control who has access to it. Instead, enterprises adopt new security measures to protect their data and to ensure access only by authorised users. BeyondCorp’s context-aware access ensures secure and personalised connections from any device or location, safeguarding corporate resources without compromising accessibility.<\/p>\n\n\n\n

<\/p>\n\n\n\n

Techolf received a proposal for a Google Workspace Mobile Device Management (MDM) and Context-Aware Access Deployment.<\/strong><\/p>\n\n\n\n\t

\n\n\t\n\t
\n\n<\/svg>

The most remarkable result is the fast-paced, spot-on implementation. A project typically takes six weeks from start to finish. Devoteam G Cloud delivered the project in four weeks, including the holiday period. <\/p><\/blockquote>

\n
\"\"<\/figure>\n
\n\t

Robbe Simoens<\/p>\n\t\n\t

CISSP | Security Officer @ TechWolf<\/p>\n\t<\/div>\n<\/div>\n<\/figcaption><\/figure>\n\t\n\t<\/div>\n\n\n\n\n

The Goal of the Project<\/h2>\n\n\n\n

The project helped TechWolf implement robust security policies to ensure that only authorised individuals with the necessary context have access to Google Workspace services and any linked SAML applications. The deployment ran using Devoteam G Cloud\u2019s experience and best practices.<\/p>\n\n\n\n

This result will assist TechWolf in attaining its <\/strong>security-based SOC2 certification<\/strong><\/a>.

What is SOC2?<\/strong><\/p>\n\n\n\n

SOC2, aka Service Organisation Control Type 2, is a cybersecurity compliance framework developed by the American Institute of Certified Public Accountants (AICPA). The primary purpose of SOC2 is to ensure that third-party service providers store and process client data securely.<\/p>\n\n\n\n

The framework specifies criteria to uphold high standards of data security, based on five trust service principles: security, privacy, availability, confidentiality, and processing integrity. TechWolf has started its compliance journey with the Security section, also known as the Common Criteria.<\/p>\n\n\n\n\t

\n\n\t\n\t
\n\n<\/svg>

Devoteam G Cloud has deep knowledge of the product and the understanding of the customer requirements. rn<\/p><\/blockquote>

\n
\"\"<\/figure>\n
\n\t

Robbe Simoens<\/p>\n\t\n\t

CISSP | Security Officer @ TechWolf<\/p>\n\t<\/div>\n<\/div>\n<\/figcaption><\/figure>\n\t\n\t<\/div>\n\n\n\n\n

The solution and methodology<\/h2>\n\n\n\n

TechWolf adopted Google Workspace Mobile Device Management (MDM) and Context-Aware Access to fortify their data security. These solutions empowered TechWolf to safeguard its valuable data, ensuring only authorised individuals could access it.<\/p>\n\n\n\n

BeyondCorp’s Context-Aware Access ensures secure and personalised connections from any device or location, safeguarding corporate resources without compromising accessibility.<\/p>\n\n\n\n

This deployment consisted of 3 phases:<\/p>\n\n\n\n