- Attestation
- SOC 2 Type II
- Continuous audit
- CSA STAR Level II
- NIST CSF maturity
- Above industry avg
The problem
Point-in-time certifications create a false sense of safety — the audit passes in March and the environment drifts by June. Partners and regulators increasingly want evidence that's current, not annual.
The approach
I built toward a continuous-assurance model: SOC 2 Type II for operating-effectiveness evidence over time, a CSA STAR Level II continuous-audit posture, and a NIST CSF-based maturity program to give a common language for where we are and where we're going.
The outcome
A compliance story that holds up under ongoing scrutiny rather than one that's only true on audit day — and a maturity score above the industry average to back it.
ComplianceSOC 2NIST CSF
