The ControlHatch Blog
Product updates, audit playbooks, and insights from the team building modern GRC software.
Categories
Tags
Compliance
Types of Access Controls: MAC, DAC, RBAC, ABAC, and More
Access controls decide who can see and do what in your systems, and they're among the most heavily tested controls in any SOX, IT, or security audit. Here's how the six main models work, when to use each, and what auditors look for.
Colton LawsonOctober 9, 20267 min read
#access-controls
#sox
#itgc
#security
#audit
Compliance
IPE in the Age of AI: Validating Completeness and Accuracy Under SOX
AI models don't produce SOC 1 reports, so any report or data set they generate for a SOX control must be validated manually. Here's a seven-stage framework for proving the completeness and accuracy of AI-generated IPE.
Colton LawsonJuly 17, 202619 min read
#sox
#ipe
#ai
#internal-controls
#audit