<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet href="https://riskpublishing.com/wp-content/plugins/pretty-rss-feeds/xslt/pretty-feed.xsl" type="text/xsl" media="screen" ?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	xmlns:media="http://search.yahoo.com/mrss/" >

<channel>
	<title>SOC 2 &#8211; Risk Publishing</title>
	<atom:link href="https://riskpublishing.com/tag/soc-2/feed/" rel="self" type="application/rss+xml" />
	<link>https://riskpublishing.com</link>
	<description>Connecting Risk Professionals</description>
	<lastBuildDate>Wed, 30 Sep 2026 19:39:07 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=7.1.2</generator>

<image>
	<url>https://riskpublishing.com/wp-content/uploads/2021/12/cropped-favicon2-32x32.png</url>
	<title>SOC 2 &#8211; Risk Publishing</title>
	<link>https://riskpublishing.com</link>
	<width>32</width>
	<height>32</height>
</image> 
	<item>
		<title>Your GRC Platform Organizes the Evidence. But What Can the Evidence Actually Prove?</title>
		<link>https://riskpublishing.com/compliance-evidence-grc-platform/</link>
		
		<dc:creator><![CDATA[Chris Ekai]]></dc:creator>
		<pubDate>Wed, 30 Sep 2026 19:39:07 +0000</pubDate>
				<category><![CDATA[Governance, Risk & Compliance]]></category>
		<category><![CDATA[Information security management system]]></category>
		<category><![CDATA[Third-Party Risk Management]]></category>
		<category><![CDATA[compliance evidence]]></category>
		<category><![CDATA[continuous control monitoring]]></category>
		<category><![CDATA[evidence sufficiency]]></category>
		<category><![CDATA[GRC platform]]></category>
		<category><![CDATA[ISO 27001]]></category>
		<category><![CDATA[SOC 2]]></category>
		<category><![CDATA[three lines model]]></category>
		<guid isPermaLink="false">https://riskpublishing.com/?p=39356</guid>

					<description><![CDATA[Key Takeaways Treat every artifact in your GRC platform as a claim with boundaries: record its criterion, scope, period and source before you rely on it. A green dashboard tile proves only what the underlying test examined. Check population coverage before you report a control as effective. Rank compliance evidence by independence and reliability. Self-attestations ... <a title="Your GRC Platform Organizes the Evidence. But What Can the Evidence Actually Prove?" class="read-more" href="https://riskpublishing.com/compliance-evidence-grc-platform/" aria-label="Read more about Your GRC Platform Organizes the Evidence. But What Can the Evidence Actually Prove?">Read more</a>]]></description>
		
		
		
			</item>
	</channel>
</rss>
