Blog

Insights and expertise from Thoropass

Featured

Becoming the End-to-End Cybersecurity Auditor

Innovation has always been at the forefront for Thoropass, and with the introduction of the Audit Lifecycle Platform, we're the only end-to-end cybersecurity auditor built for the AI era.

Learn More

Latest posts

Compliance

What is GDPR?

December 1, 2025

|

GDPR is the EU's data protection regulation that applies to any organization handling EU residents' data. Learn its core principles, individual rights, and compliance requirements.

Compliance

What is HIPAA (Privacy Rule)?

December 1, 2025

|

HIPAA's Privacy Rule governs how covered entities can use and disclose protected health information. Learn what it requires, who it applies to, and key compliance steps.

Compliance

What is ISO 27017 & ISO 27018?

December 1, 2025

|

ISO 27017 and ISO 27018 extend ISO 27001 with cloud-specific security and privacy controls. Learn what each standard covers and why cloud service providers need them.

Compliance

What is HIPAA (Security & Breach Notification Rule)?

December 1, 2025

|

HIPAA's Security Rule and Breach Notification Rule set requirements for protecting ePHI and reporting breaches. Learn what each rule mandates and how to stay compliant.

Compliance

What is ISO 42001?

December 1, 2025

|

ISO 42001 is the international standard for AI management systems. Learn what it requires, how it applies to organizations developing or using AI, and how to get certified.

Compliance

What is NIST CSF Assessment?

December 1, 2025

|

The NIST Cybersecurity Framework provides a flexible structure for managing cybersecurity risk. Learn its five core functions, who uses it, and how an assessment works.

Compliance

What is HITRUST + AI?

December 1, 2025

|

HITRUST AI is a certification framework for assessing the security of artificial intelligence systems. Learn what it covers, how it works, and which organizations should pursue it.

Compliance

What is NYCRR Part 500 - DFS Assessment?

December 1, 2025

|

NY DFS Part 500 sets cybersecurity requirements for financial services companies operating in New York. Learn what it mandates, who it applies to, and how to comply.

Compliance

What is HITRUST e1?

December 1, 2025

|

HITRUST e1 is the entry-level HITRUST assessment covering 44 foundational cybersecurity requirements. Learn who it's for, what it assesses, and how to get certified.

Compliance

What is HITRUST i1?

December 1, 2025

|

HITRUST i1 is a one-year validated assessment for mid-level risk organizations. Learn what controls it covers, how it differs from r2, and whether it's right for your organization.

Compliance

What is PCI DSS?

December 1, 2025

|

Compliance

What is HITRUST r2?

December 1, 2025

|

Compliance

What is PIPEDA?

December 1, 2025

|

PIPEDA governs how private-sector organizations in Canada collect and use personal data. Learn what it requires, who it applies to, and how to achieve compliance.

Compliance

What is ISO 27001?

December 1, 2025

|

ISO 27001 is the international standard for information security management systems. Learn what it covers, who needs certification, and how the audit process works.

Compliance

What is SOC 1?

December 1, 2025

|

Learn what SOC 1 is, who needs it, and how it differs from SOC 2. Understand the two report types—Type I and Type II—and what the audit process involves.

Curated by experts

We provide the compliance expertise, so you don’t have to

At Thoropass, we’re more than a readiness solution. Our team of experts are equipped with insight and hands-on experience to provide you with industry-leading perspective and guidance.

Meet the Experts

Stay connected

Subscribe to receive new blog articles and updates from Thoropass in your inbox.

Thank you for subscribing! Be on the lookout for confirmation in your inbox!

Oops! Something went wrong while submitting the form.

Want to join our team?

Help Thoropass ensure that compliance never gets in the way of innovation.

View open roles

Have any feedback?

Drop us a line and we’ll be in touch.

Contact us

Certifications:

Laika Compliance, LLC dba Thoropass Assurance is a licensed certified public accounting firm registered with the American Institute of Certified Public Accountants (AICPA). Thoropass, Inc. dba Thoropass is a leading cybersecurity and compliance professional services and technology firm.