Insights & Research
Intelligence for the modern enterprise
Strategic analysis, technical deep-dives, and field reports from the MarkKings Group practice, covering AI, security, cloud, and operating-model transformation.
Browse
Latest articles
These articles are written by the MarkKings Group team for owners and managers of small and mid-sized businesses. They cover AI business automation, cybersecurity and IT audits, SOC 2 and HIPAA readiness, AI governance, websites and digital marketing, with practical steps you can apply or discuss with us.
Download IT audit and AI governance planning templatesAll published articles
- SOC 2 Trust Services Criteria Explained in Plain English
· SOC 2 asks you to prove controls against a published yardstick.
- SOC 2 Type 1 vs Type 2: Which Report Do You Need First?
· SOC 2 type 1 covers a single date, type 2 covers a period.
- Planning SOC 2 Readiness: Scope, Evidence and Next Steps
· SOC 2 readiness is preparation, not the examination itself.
SOC 2 Trust Services Criteria Explained in Plain English
SOC 2 asks you to prove controls against a published yardstick. Here is what the five trust services criteria cover, which ones you actually need, and how to scope your first report.
SOC 2 Type 1 vs Type 2: Which Report Do You Need First?
SOC 2 type 1 covers a single date, type 2 covers a period. Here is how to tell which report your buyer needs first, and what has to be in place before the examination.
Planning SOC 2 Readiness: Scope, Evidence and Next Steps
SOC 2 readiness is preparation, not the examination itself. Here is how scope, gap assessment, control ownership, evidence periods and auditor coordination actually fit together.
Have a question
Want a deeper conversation?
Talk to our team about how these ideas apply to your organisation.