CSA STAR Registry

SOCRadar has established, documented, and implemented comprehensive audit and assurance policies, procedures, and standards as part of its Information Security Management System (ISMS). These controls are approved by executive management and are communicated to relevant stakeholders across the organization. Audit and assurance activities are applied consistently to ensure compliance with regulatory, contractual, and industry requirements, including ISO/IEC 27001 and SOC 2. Audit and assurance policies and procedures are reviewed and updated at least annually, or more frequently in response to significant changes in business operations, regulatory requirements, or the threat landscape. SOCRadar performs regular internal reviews and risk-based assessments to evaluate the effectiveness of controls and ensure continuous improvement. Independent external audits are conducted periodically by accredited third-party auditors in accordance with recognized standards. SOCRadar retains full ownership and governance of the audit and assurance program, including scope definition, remediation tracking, and management review of audit results. Findings and corrective actions are documented, monitored, and addressed in a timely manner to ensure the ongoing effectiveness and maturity of the control environment.