Receive the latest news, webinars, updates, articles, and helpful curated content
CASE STUDY
The value Drata provides from onboarding to the audit, and beyond
CASE STUDY
How automated evidence collection and customizable control mapping streamlines Lemonade’s compliance success.
CASE STUDY
A case of how the right platform can make achieving security best practices hassle-free
CASE STUDY
A case on why Drata is the go-to partner for security and compliance needs
CASE STUDY
A case of how APL nextED uses Drata’s platform to generate immediate value
CASE STUDY
A case of how Drata’s automation-led approach empowers companies to achieve SOC 2 quickly and easily
CASE STUDY
A case of how Micruity tapped Drata to automate SOC 2 compliance and shorten sales cycles
CASE STUDY
A case of how Drata simplifies and accelerates the path to compliance
CASE STUDY
A case of how policy templates and automated evidence collection illuminate the SOC 2 roadmap
CASE STUDY
A case of how the path to SOC 2 is just as important as receiving the attestation report
CASE STUDY
A case of how SOC 2 compliance keeps SnapNHD’s business growing
CASE STUDY
A case of how Drata’s automation paves a smooth and efficient path along the SOC 2 journey
CASE STUDY
A case of how Drata reduces the time and cost associated with compliance
CASE STUDY
A case of how an intuitive platform can expedite the compliance journey
CASE STUDY
A case of a startup achieving compliance to ensure scalability
CASE STUDY
A case of how automation can save on resources and compliance costs while enhancing security programs
CASE STUDY
A case of investing in compliance early for a smoother journey
CASE STUDY
A case of why compliance is a must when dealing with enterprise customers.
CASE STUDY
A case of building confidence in processes, tooling, and evidence required for standing up a strong security posture. Learn how Chameleon…
CASE STUDY
A case of a small team on the fast track to a strong security posture. Runway makes it easy for teams to coordinate their mobile app releases.
CASE STUDY
A case of an intranet software company using Drata to augment their compliance program
CASE STUDY
A case of how Drata’s continuous monitoring eased the heavy lift of evidence collection for a new company
CASE STUDY
A case of doing right by your customers and their data, even with competing priorities and massive growth
CASE STUDY
A case of Drata’s all-in-one platform serving as the perfect solution for a user-friendly compliance journey
CASE STUDY
A case of an early-stage company being committed, resourceful, and open to wearing many hats in order to successfully meet SOC 2
CASE STUDY
A case of a company obtaining compliance 4x faster by working with an automation solution
CASE STUDY
A case of working closely with Drata’s customer support team to achieve SOC 2 and kickstart company security efforts
CASE STUDY
A case of leveraging a Drata’s features, functionality, and customer support to quickly and efficiently receive a SOC 2 report
CASE STUDY
A case of a financial SaaS copmany using Drata to preemptively focus on continuous compliance in order to meet high stakes industry demands
CASE STUDY
A case of founders who know a thing or two about risk, and who understand the importance of mitigating risk for their customers
CASE STUDY
A case of how starting early with SOC 2 can ensure things are set up to scale securely from day one
BLOG ARTICLE
The days of managing risks in spreadsheets are over. Drata’s Risk Management Solution manages compliance and risk in one location.
BLOG ARTICLE
Drata’s latest product updates include engaging security training, a dynamic personnel view for users, and two additional integrations.
BLOG ARTICLE
Drata’s latest product updates include engaging security training, a dynamic personnel view for users, and two additional integrations.
BLOG ARTICLE
It’s important to be proactive about IT risk management. Read our guide and understand what it entails and why you need it.
BLOG ARTICLE
Drata is now compliant with HIPAA, the federal law for patient health protection in the U.S. Read how and why our team prioritized HIPAA.
BLOG ARTICLE
Even if you understand why you should be certified, you may not know how to get started. Consider this post your ISO 27001 checklist.
BLOG ARTICLE
We’re excited to launch Custom Frameworks and the ability to map our automated tests to any control, even custom controls.
BLOG ARTICLE
Third-party risk management brings your external risks under control and lets you address security, financial, legal, and compliance risks.
BLOG ARTICLE
While containerization is certainly not without risks, the path towards a more secure environment starts with DevSecOps on day one.
BLOG ARTICLE
There are a number of misconceptions made every day about the auditing process and auditors themselves. We’ve dispelled the most common here.
BLOG ARTICLE
Information risks are everywhere, but which ones matter most? Choosing the right risk assessment methodology can help you prioritize.
BLOG ARTICLE
Considering ISO 27001? Learn what you need to know about ISO 27001 certification costs and how they may vary for your organization.
BLOG ARTICLE
With GDPR being a more recent law, there are some misconceptions about who it applies to and how it affects companies around the globe.
BLOG ARTICLE
You need a Statement of Applicability for an ISO 27001 certification. Here’s a quick guide to make the process as stress-free as possible.
BLOG ARTICLE
SOC 2 compliance means having controls in place to meet industry standards for security, privacy, availability, processing integrity, and confidentiality. Here’s everything you need to know…
BLOG ARTICLE
Get an overview of what ISO 27001 is, why it’s important, best practices to help you achieve certification for your organization, and more.
BLOG ARTICLE
SOC 2 compliance means having controls in place to meet industry standards for security, privacy, availability, processing integrity, and confidentiality. Here’s everything you need to know…
BLOG ARTICLE
Drata’s latest product updates include engaging security training, a dynamic personnel view for users, and two additional integrations.
BLOG ARTICLE
Vulnerability scanning is a key control within most security frameworks. Here’s everything you need to know about vulnerability scanning.
BLOG ARTICLE
What is SOC 2 automation software and why do you need it? Companies today are putting SOC 2 on autopilot. Here’s how they’re doing it.
BLOG ARTICLE
Use your security posture to build trust and expedite the sales process with Drata’s Trust Center. Keep reading to learn how.
BLOG ARTICLE
Drata will be joining RSA in person this year. Visit us at booth 6372 in Moscone’s North Expo to check out Drata and get some cool swag.
BLOG ARTICLE
Learn the differences between vulnerability scanning and penetration testing to make the best choice for your organization’s needs.
BLOG ARTICLE
We’ve added frameworks to the Drata platform including CCPA, ISO 27701, Microsoft SSPA, NIST CSF, NIST 800-171, NIST 800-53, CMMC, and FFIEC.
BLOG ARTICLE
Going for SOC 2? Find out what a SOC 2 audit costs, what influences the total, and what you can expect in terms of time and resources spent.
BLOG ARTICLE
Red teaming helps companies identify vulnerabilities and guide improvements of their security and compliance programs.
BLOG ARTICLE
Is your business CCPA and CPRA compliant? Learn everything you need to know about CCPA compliance with this guide.
BLOG ARTICLE
Drata’s latest product updates include engaging security training, a dynamic personnel view for users, and two additional integrations.
BLOG ARTICLE
Former Looker and Google leader, Simanta Chakraborty, joins as VP of Sales. Read about his past roles and his goals for Drata’s Sales Team.
BLOG ARTICLE
Get the information you need to understand what security controls are and what they mean for your organization under different frameworks.
BLOG ARTICLE
How is California’s Consumer Privacy Act different from Europe’s GDPR? Keep reading for a breakdown of key differences and similarities.
BLOG ARTICLE
Former Looker and Google leader, Simanta Chakraborty, joins as VP of Sales. Read about his past roles and his goals for Drata’s Sales Team.
BLOG ARTICLE
We’re excited to announce our ISO 27001 certification. Read about what our process looked like and key learnings your team may find useful.
BLOG ARTICLE
Drata’s latest product updates include engaging security training, a dynamic personnel view for users, and two additional integrations.
BLOG ARTICLE
This easy-to-follow SOC 2 compliance checklist will help your organization prepare for and maximize the chance of passing an audit.
BLOG ARTICLE
This easy-to-follow SOC 2 compliance checklist will help your organization prepare for and maximize the chance of passing an audit.
BLOG ARTICLE
Former Looker and Google leader, Simanta Chakraborty, joins as VP of Sales. Read about his past roles and his goals for Drata’s Sales Team.
BLOG ARTICLE
This easy-to-follow SOC 2 compliance checklist will help your organization prepare for and maximize the chance of passing an audit.
BLOG ARTICLE
Compliance doesn’t have to be complicated. The compliance team at Drata is here to help you with our Ask an Auditor series.
BLOG ARTICLE
GDPR compliance isn’t a final destination—protecting customer personal information is an ongoing task, here are a few ways to maintain GDPR.
BLOG ARTICLE
Our newest integration is here: SOC 2 security awareness training with Curricula. Meet your requirements while making training fun for your team.
BLOG ARTICLE
Check out our latest product launches and updates. From connecting multiple MDMs to auditor view updates, you’ll enjoy using Drata even more.
BLOG ARTICLE
We’re excited to announce the addition of GDPR to Drata’s automated platform. Use Drata to simplify and maintain GDPR compliance.
BLOG ARTICLE
Security and compliance aren’t interchangeable concepts. Learn what you need to know about the key differences and how they work together.
BLOG ARTICLE
Use these resources for Black professionals in security, compliance, and privacy to start or further develop your career and connections.
BLOG ARTICLE
There are eight different types of PCI self-assessment questionnaires. Which one is right for your organization?
BLOG ARTICLE
Data classification is critical for data protection and security. Learn its ins and outs and its role in privacy programs.
BLOG ARTICLE
Our partnership with Kandji extends Mac monitoring capabilities by enabling our platform to pull data directly from Kandji via API.
BLOG ARTICLE
Many organizations rely on one or two people for all data privacy responsibilities. Here are seven tips on prioritizing your initiatives.
BLOG ARTICLE
Consumer sentiments, policies, and practices around data privacy are always changing. For a quick snapshot, here are a few recent statistics.
BLOG ARTICLE
Former Looker and Google leader, Simanta Chakraborty, joins as VP of Sales. Read about his past roles and his goals for Drata’s Sales Team.
BLOG ARTICLE
We’re excited to announce Drata’s new framework—PCI DSS. If you accept, process, store, or transmit credit card information, PCI compliance is required.
BLOG ARTICLE
Are you HIPAA compliant? Get the answers you need to stay in compliance and avoid the consequences of failing to follow HIPAA standards.
BLOG ARTICLE
SOC 2 compliance acts as a critical building block to a strong security posture and can positively shape a startup’s long-term trajectory.
BLOG ARTICLE
Last week marked six months since launching Drata out of stealth, and today we’re proud to announce our $25M Series A round led by GGV…
BLOG ARTICLE
First time going through a SOC 2 audit? Here’s what you can expect throughout the process from start to finish.
BLOG ARTICLE
Drata releases its third framework in less than a year, helping automate HIPAA compliance and secure critical health information
BLOG ARTICLE
Rated highly by G2 users, Drata is also #1 in the G2 Relationship Index for Cloud Compliance and Cloud Security.
BLOG ARTICLE
There are still many questions around the process and purpose behind SOC 2. Let’s break it down by going over a few common myths.
BLOG ARTICLE
When and how should you choose an audit firm for your SOC 2 audit? Our professional auditor has the answers.
BLOG ARTICLE
With Drata’s new integration with Okta, customers will be able to use Okta as their identity provider (iDP).
BLOG ARTICLE
With the proliferation of cloud platforms, the exposure to online threats such as phishing, data theft, and risk continues to rise. So, how vulnerable to a cyber attack is your business?
BLOG ARTICLE
To protect customer data, the fintech ecosystem is rallying around a new data security standard—Open Finance Data Security Standard (OFDSS).
BLOG ARTICLE
Less than 10 months out of stealth, Drata is among the fastest SaaS companies ever to reach a $1 billion valuation.
BLOG ARTICLE
Drata becomes one of the fastest SaaS companies ever to reach $1 billion valuation. Read what’s in store for the future of Drata.
BLOG ARTICLE
What is SOC 2+ and do you need it? How does it stack up against HIPAA? An expert auditor weighs in on key differences and how to get started.
BLOG ARTICLE
What is HIPAA compliance? How can you get started? And how much overlap does it have with SOC 2? Here are some answers.
BLOG ARTICLE
Is your company ready to accelerate its SOC 2 Readiness? Use Drata’s dynamic readiness checklist to score your SOC 2 readiness level and understand what getting your SOC 2 report entails…
BLOG ARTICLE
Everything you need to know about SOC 2 type 2 reports—from what they are to some best practices to get ready for yours.
BLOG ARTICLE
You’re getting ready for your first SOC 2 audit. You’ve got your controls in place and have selected an audit firm to partner with. Now, it’s time for your observation period—and you’re concerned about exceptions.
BLOG ARTICLE
The role of a company’s Chief Information Security Officer has evolved over the past few years…to put it lightly…
BLOG ARTICLE
What is a SOC 2 criteria or requirement? What is a control and which ones do we need to implement? Learn from Drata experts on how to design and implement the right controls to satisfy the SOC 2 requirements and ace your audit…
BLOG ARTICLE
Last week marked six months since launching Drata out of stealth, and today we’re proud to announce our $25M Series A round led by GGV…
BLOG ARTICLE
It’s no surprise that security frameworks like SOC 2 and certifications like ISO 27001 are becoming ever more important for any company that handles customer data (which is most of us these days), but what’s the difference…
BLOG ARTICLE
We asked Troy Fine, an experienced SOC 2 auditor and senior manager at Schneider Downs, about the most common mistakes he sees companies make before and during their SOC 2 audit…
BLOG ARTICLE
A SOC 2 report is a CPA-certified attestation that your company meets security standards. Here’s what that means and why it matters…
BLOG ARTICLE
The 7 things SaaS companies can do to get SOC 2 audit-ready in as little as 2 weeks. Embarking on a SOC 2 process can be overwhelming. Typically when SOC 2 becomes a priority, it’s something you needed yesterday…
BLOG ARTICLE
My team and I are thrilled to introduce Drata to the world, and announce our $3.2M seed round led by Cowboy Ventures with participation from…
BLOG ARTICLE
SOC 2 reports provide information about how effectively a service provider manages the security, privacy, and integrity of sensitive…
BLOG ARTICLE
You’ll find plenty of content online regarding the benefits of SOC 2, but here’s the truth about why you don’t need to worry about it…
BLOG ARTICLE
A SOC 2 report allows your company to show that it’s operating in a secure manner so you can win and retain more business…
BLOG ARTICLE
During a SOC 2 examination, an auditor reviews that your company has documented policies and procedures relating to your information security (“infosec”) program…
Webinar
Senior Associate Austin Capps specializes in third-party attestations, including SOC 1 and 2 audits, and will field your questions live.
Webinar
Troy Fine, auditor turned resident Drata compliance advisor, will answer all of your questions about SOC 2 and compliance.
Webinar
Troy Fine, auditor turned resident Drata compliance advisor, will answer all of your questions about SOC 2 and compliance
Webinar
Learn how Clearco (formerly Clearbanc), the “pay as you grow” financing pioneer is empowering their team and leveraging automation to meet SOC 2, streamline processes, and prioritize security alongside unicorn-level…
Webinar
Get Jarvis Analytics’ playbook on how they leveraged automation to set up a foundational security program, without depleting in-house engineering resources.
Close more sales and build trust faster while eliminating the hundreds of hours of manual work that used to go into maintaining your SOC 2 report and ISO 27001 certification.
Learn how Iteratively used Drata to get their SOC 2 report faster than most thought possible, and now monitor their security & compliance posture…