WPS is proud to announce that we are now SOC 2 compliant.
This milestone reflects our continued commitment to customer trust, data security, and the protection of customer information. As WPS continues to support building owners, property managers, facility teams, and organizations with emergency plans, emergency-response training, cloud-based emergency-management software, mobile applications, and life-safety solutions, maintaining strong security practices remains an important priority.
What is SOC 2 and why is it important?
SOC 2, or Service Organization Controls 2, is a framework governed by the American Institute of Certified Public Accountants (AICPA). With a SOC 2 audit, an independent service auditor reviews an organization’s policies, procedures, and evidence to determine if its controls are designed and operating effectively.
A SOC 2 report communicates a company’s commitment to data security and the protection of customer information.
Improving our security posture
SOC 2 compliance represents an organization’s commitment to customer trust and is an important milestone toward improving its overall security posture.
With increasing cybersecurity threats and data breaches, it is important for organizations to prioritize information security and the protection of their systems and data. By undergoing a SOC 2 audit, WPS’s controls and processes were validated by a third party who assessed the controls relevant to our application and operations.
For WPS, this is especially important because our customers rely on our technology and services to help support emergency preparedness, compliance documentation, communication, and life-safety programs across their buildings.
Why we pursued SOC 2
SOC 2 compliance is an important step in demonstrating to customers, stakeholders, and interested parties that WPS values their trust and has implemented security controls to help protect customer information.
As WPS continues to provide cloud-based emergency-management software and mobile applications, we recognize the importance of protecting data and mitigating potential security risks on an ongoing basis. Pursuing SOC 2 compliance was a natural step in strengthening our security practices and supporting the organizations that depend on WPS.
WPS’s journey to SOC 2 compliance
Compliance Partners
Vanta
We partnered with Vanta, a leader in the Trust Management space, to help automate the collection of our audit evidence. Vanta supported us in building and maintaining a strong security foundation to help protect customer data.
Advantage Partners
Our audit firm, Advantage Partners, was extremely helpful in creating a seamless audit experience. With their guidance and support, we were able to complete the SOC 2 audit process in an efficient and organized manner.
Process
While SOC 2 can be a significant undertaking, our compliance partners helped streamline the process.
We leveraged Vanta to integrate key systems and guide us in implementing the policies and procedures needed to become audit ready. Vanta provided direction throughout our compliance journey and helped support the evidence-collection process.
Advantage Partners then confirmed our audit readiness and conducted the SOC 2 audit. As part of the audit, Advantage Partners evaluated the controls we have in place and issued our report following the completion of the audit process.
Timeline
One key takeaway from this process is that improving security posture and achieving compliance requires dedicated focus and time from the organization.
The readiness period can take the most time, but with the right compliance partners and a clear internal commitment, the process can be more streamlined. For WPS, making security and compliance a priority helped us move through the audit process efficiently.
Now that controls are implemented and security remains a priority for our team, we are committed to continuing to maintain and improve our security practices over time.
Lessons we learned
Focus on improving security posture, not checking boxes
SOC 2 compliance is not just about completing a checklist. It is about strengthening the policies, procedures, and controls that support a company’s overall security posture.
For WPS, this process reinforced the importance of treating security as an ongoing responsibility. As our customers continue to rely on WPS Evac and our broader emergency-management solutions, maintaining strong security practices is an important part of supporting trust.
Start the process early
It is easier to implement secure policies and procedures early rather than waiting until later. Building secure processes and infrastructure is a key component of a successful security program.
The SOC 2 process helped us continue formalizing and validating the systems, documentation, and internal practices that support our commitment to customer data protection.
The right partners are key
Having the right compliance partners made the process more efficient and easier to manage.
Vanta helped guide the evidence-collection and trust-management process, while Advantage Partners provided audit guidance and support throughout the engagement. Their combined expertise helped WPS move through the process with clarity and confidence.
Our ongoing commitment
Achieving SOC 2 compliance is an important milestone, but it is not the end of the journey.
WPS remains committed to maintaining strong security practices, protecting customer information, and continuing to improve the systems and processes that support our customers.
As we continue helping organizations strengthen emergency preparedness, streamline compliance documentation, and protect building occupants, we will continue to prioritize trust, security, and responsible data protection.
To learn more about WPS Evac and our emergency-management solutions, contact our team today.
