Guidance for Every Step of Your Compliance Journey

Read on

Preparing for the 2026 HIPAA Security Rule Changes: Five Things Healthcare InfoSec Leaders Need to Know Now

Joe Hunsicker
Head of Sales Engineering
Joe Hunsicker, Thoropass' head of sales engineering, outlines how covered entities and business associates can best prepare for the upcoming HIPAA Security Rule updates

Editor's Picks

Read on
blog

10 Things I’ve Learned from Thousands of IT Audits

IT audits don't have to cause sleepless nights. Thoropass' Chris Beiro outlines 10 things to consider to ensure your next audit is as stress-free as possible.

Chris Biero
BLOG

When Compliance Becomes Theater, Everyone Loses

Security compliance and audit are at risk of becoming commoditized, where speed and time are the only considerations. What risks does this pose and how can they be avoided?

GUIDE

State of Audit and Compliance 2026

CASE STUDY

Revolutionizing healthcare with responsible innovation: Alaffia Health prioritizes security and compliance with Thoropass

Have Questions? Connect With a Compliance Expert

Get audit-ready with expertise embedded across Thoropass—from our auditors to our platform.

Get Audit Ready

Read the Latest Blogs

View All

Five Key Considerations for SaaS Healthtech Companies Pursuing HITRUST Certification

Avoid common HITRUST certification pitfalls. Learn how to define scope, manage shared responsibility, and streamline your assessment for a smoother, more successful compliance journey.

In the World of Audit, Trust Isn’t Claimed. It’s Proven

Compliance only works if it can be trusted. Here’s how Thoropass ensures audit independence, strengthens transparency, and delivers credible results in a modern compliance environment.

Preparing for an AI-Driven Audit: Five Things You Need to Know

Prepare for AI-driven audits with five key insights on automation, risk, and the critical role of human judgment in building trust and audit-ready processes.

The State of Cybersecurity Audits in 2026: Why AI Is Changing Everything

The Thoropass 2026 State of Audit report discusses the increasing complexity that AI has brought to security compliance and audit

Thoropass Security Research: Responsible Disclosure of TP-Link Vulnerabilities

Independent research by Thoropass pentesters uncovered three vulnerabilities (CVE-2025-9520/21/22) in TP-Link Omada Controller, including IDOR, verification bypass, and SSRF.

Explore Helpful Resources

All
Frameworks
Content type
Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

No blog posts match your search. Try changing your search terms.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Get Started

Products

Thoropass AuditCompliance Automation
PentestingThoropass AIAccess ReviewsSecurity QuestionnairesRisk AssessmentTrust CenterIntegrations and APIs

Solutions

Get CompliantMaintain ComplianceIT Security AuditsThoropass vs. Audit FirmsThoropass vs. Vanta

Frameworks

SOC 1SOC 2HIPAAHITRUSTCyber EssentialsGDPRCMMC Level 1NIST CSF 2.0PCI DSSOther Frameworks

Resources

Case Studies
BlogGuidesEventsGlossaryHelp Center

Industries

HealthcareSaaSFinTechOther Industries

Company

Our DifferenceMeet the ExpertsNewsroomCareersIndependence and ExcellenceBecome a PartnerTrust CenterContact us

Legal

MSADPAReport an IssueImpartiality and InquiriesTerms and ConditionsPrivacy Policy

Certifications:

Laika Compliance, LLC dba Thoropass Assurance is a licensed certified public accounting firm registered with the American Institute of Certified Public Accountants (AICPA). Thoropass, Inc. dba Thoropass is a leading cybersecurity and compliance professional services and technology firm.

© Copyright 2026 Thoropass, Inc.

Linkedin Logo Streamline Icon: https://streamlinehq.com
X Logo Streamline Icon: https://streamlinehq.com
Video Player 1 Streamline Icon: https://streamlinehq.com