Aug. 8, 2023, 4:14 p.m. | /u/Odd_Celery_6572

cybersecurity www.reddit.com

Can a company state they are "XYZ" compliant even without an official attestation of compliance from a 3rd party auditing vendor?

For example: lets say i sell chairs online and am truthfully PCI compliant because i store/process/transmit payment card data. I actually have the attestation of compliance from a 3rd party auditing/compliance vendor. Can I also state I am HIPAA compliant as well even without that attestation? From a technical perspective, I am complying with all the HIPAA guidelines/framework requirements? …

attestation auditing card compliance compliance frameworks cybersecurity data frameworks official party payment payment card pci process sell state store vendor

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Cybersecurity Engineer

@ Booz Allen Hamilton | USA, VA, Arlington (1550 Crystal Dr Suite 300) non-client

Invoice Compliance Reviewer

@ AC Disaster Consulting | Fort Myers, Florida, United States - Remote

Technical Program Manager II - Compliance

@ Microsoft | Redmond, Washington, United States

Head of U.S. Threat Intelligence / Senior Manager for Threat Intelligence

@ Moonshot | Washington, District of Columbia, United States

Customer Engineer, Security, Public Sector

@ Google | Virginia, USA; Illinois, USA