BD Emerson

BACKGROUND

Please describe your company and position.

I am the CTO of Supered

Describe what your company does in a single sentence.

Supered is a digital adoption platform that supercharges sales teams and HubSpot solution partners.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BD Emerson to accomplish?

• Supered was seeking to rapidly achieve SOC 2 Type I
• Quick follow up with SOC 2 Type II and achieve compliance against GDPR

SOLUTION

How did you find BD Emerson?

Referral

Why did you select BD Emerson over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from BD Emerson were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

BD Emerson was in charge of developing our security program, and then navigate it through the SOC2 process (Type I and II).

• Create the initial security program framework
• Implement the framework in Drata
• Answer questionairres related to the security program
• Work with the auditors through Type I and Type II
• Help us ensure we had additional compliance
• Help us with marketing our efforts

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• Achieving SOC 2 Type I in under 30 days
• Following up with SOC 2 Type II within 4 months of the Type I audit completing

Achieving SOC 2 Type 2 after 120 with no exceptions on the report.

Controls were built for all five Trust Service Criteria (TSCs).

Describe their project management. Did they deliver items on time? How did they respond to your needs?

They helped develop the plan and timeline for what we needed to achieve. They assigned deliverables to me and made sure I got them done on time. They met the level of urgency that we had at each step of the process.

What was your primary form of communication with BD Emerson?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

Just how seamless they made the process feel. It's not uncommon to see people lamenting their SOC 2 process and how much work it took. I really didn't feel that through the process. It actually felt fairly smooth and Drew gave us assurances through the process as to how things were going.

Are there any areas for improvement or something BD Emerson could have done differently?

The only issues we ran into during the process were due to outside tool problems (security framework program). They helped us address these issues when they popped up, and we still got a clean report despite that.

BACKGROUND

Please describe your company and position.

I am the CEO of mdhub

Describe what your company does in a single sentence.

mdhub powers mental health clinicians with our clinical AI assistant to efficiently run their clinics.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BD Emerson to accomplish?

• SOC 2 Compliance

SOLUTION

How did you find BD Emerson?

Referral

Why did you select BD Emerson over others?

High ratings

How many teammates from BD Emerson were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

BD Emerson CPA began our engagement with mdhub by analyzing the results of its thorough gap assessment and the measures mdhub had implemented to resolve its gaps with HIPAA and SOC 2 standards. During the audit, BD Emerson CPA reviewed and advised on technical controls, governance, and managerial controls in support of meeting mdhub’s control objectives. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

SOC 2 Type 1 compliance and re-assessment of HIPAA compliance. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Working with BD Emerson CPA has been instrumental in our journey towards achieving and maintaining compliance with both HIPAA and SOC 2 standards. Their expertise and thorough approach provided us with invaluable insights and a clear path forward, ensuring that our platform meets the highest security and privacy standards. We appreciate how the audit team did more than just check our controls. 
They provided strategic guidance to build repeatable control activities to make sure we continuously mature our processes to protect data and systems. This partnership has not only reinforced our commitment to data protection but has also significantly enhanced our credibility and trust with our clients.

What was your primary form of communication with BD Emerson?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

In-depth knowlegde and hands-on support.

Are there any areas for improvement or something BD Emerson could have done differently?

N/A

BACKGROUND

Please describe your company and position.

I am the CEO of Intellinum Inc

Describe what your company does in a single sentence.

Intellinum is Oracle’s preferred mobility partner and leading Logistics implementation professional services firm. The company is comprised of a team of experienced leaders with deep expertise in Oracle development and functional expertise. With headquarters in Dallas, Texas, and offices in Indonesia, India, and Dubai, Intellinum is a global organization that serves a diverse customer base.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BD Emerson to accomplish?

• Improve our security and compliance program.

SOLUTION

How did you find BD Emerson?

Referral

Why did you select BD Emerson over others?

• High ratings
• Pricing fit our budget
• Great culture fit
• Good value for cost
• Referred to me
• Company values aligned

How many teammates from BD Emerson were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

We were referred to BD Emerson by our external auditor. BD Emerson is a technology/security consulting partner and we used them to close a client deal that required a gap assessment and the implementation of lots of different security controls. The BDE team came in and rapidly built out the action items following the gap assessment. 

We then used their team to build out the controls, make sure they worked, and then, as our CISO, Drew provided responses to our prospects to help close business. Since our initial project, we have engaged BD Emerson as a managed service provider to be responsible for our security and compliance program. Drew and his team are very knowledgeable and responsive, and our team are very impressed and happy with their services. 

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

After we engaged with BD Emerson for our security and compliance program, we were able to confidently work with our prospects and win more deals. 

Describe their project management. Did they deliver items on time? How did they respond to your needs?

We have a single point of contact who also acts as our CISO. He is very knowledgable in the area of company/internet security, very responsive and easy to work with. Furthermore, in order to manage the cost, he has a team of different levels/cost structures that can work with us. 

What was your primary form of communication with BD Emerson?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We receive personalized services from their top-notch consultants in the area of security and deal management. 

Are there any areas for improvement or something BD Emerson could have done differently?

None.

BACKGROUND

Please describe your company and position.

I am the CEO of Incentiv

Describe what your company does in a single sentence.

Executive talent management and compensation benchmarking software

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BD Emerson to accomplish?

• Incentiv was seeking to rapidly achieve SOC 2 Type 1 to initiate conversations with enterprise businesses.
• Then follow on with Type 2 as well as achieving compliance against GDPR

SOLUTION

How did you find BD Emerson?

Referral

Why did you select BD Emerson over others?

• High ratings
• Good value for cost
• Referred to me

How many teammates from BD Emerson were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Objectives

• Achieve SOC 2 Type 1 Compliance: Demonstrate the effectiveness of our controls at a specific point in time.
• Achieve SOC 2 Type 2 Compliance: Demonstrate the effectiveness of our controls over a defined period.
• Ensure Compliance Across All Principles: Security, Availability, Processing Integrity, Confidentiality, and Privacy.
• Maintain Continuous Improvement and Advisory Services: Ensure ongoing compliance and address any emerging risks or changes in the regulatory environment

Scope

• Information security policies and procedures
• System availability and disaster recovery planning
• Data processing integrity
• Confidential data management
• Privacy policies and data protection measures
• Vendor Support

Vendor Support

• Initial Assessment and Gap Analysis: 
  • Conducted a thorough assessment of existing controls and identified gaps.
  • Provided a detailed roadmap for remediation and enhancement of controls.
• Policy and Procedure Development: 
  • Assisted in the creation and refinement of security policies and procedures.
  • Ensured alignment with SOC 2 requirements and best practices.
• Implementation Support: 
  • Guided the implementation of necessary controls and measures.
  • Provided templates, tools, and resources to streamline the process.
• Audit Preparation and Facilitation: 
  • Conducted mock audits and readiness assessments.
  • Prepared documentation and evidence required for the audit.
  • Coordinated with auditors and facilitated the audit process.
• Continuous Advisory Services: 
  • Offered ongoing support and advisory services to ensure continuous compliance.
  • Provided updates on regulatory changes and emerging threats.
  • Conducted regular reviews and assessments to maintain and improve control effectiveness.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

1. Achieving SOC 2 Type 1 in under 30 days.
2. Achieving SOC 2 Type 2 in fastest window possible
3. Enhanced Security Posture: Improved policies, procedures, and controls across all Trust Services Criteria
4. Continuous Compliance: Established a framework for ongoing compliance and risk management.
5. Achieving SOC 2 Type 2 after 120 with no exceptions on the report.
6. Controls were built for all five Trust Service Criteria (TSCs).

Describe their project management. Did they deliver items on time? How did they respond to your needs?

The vendor's project management was exemplary. They were always to the point, courteous, and delivered items on time. They were highly responsive to our needs, available in whatever forum made the most sense—Slack, email, or Zoom. Their efficiency and adaptability ensured a smooth process and successful audit completion.

What was your primary form of communication with BD Emerson?

Virtual Meeting

What did you find most impressive or unique about this company?

What impresses me most about this company is their ability to make complex topics seem simple. Their commercial approach was highly tailored to our needs as a startup, ensuring that every step of the process was clear and relevant. Their to-the-point and courteous communication, along with their flexibility in using various forums like Slack, email, and Zoom, made the entire audit preparation process smooth and efficient.

Are there any areas for improvement or something BD Emerson could have done differently?

One area for improvement would be offering different sets of ongoing services for startups, such as low touch and high touch options. This flexibility would allow us to switch to a higher-touch service when preparing for an audit and revert to a lower-touch service during less critical times. This tailored approach would better align with our varying needs throughout the year.

BACKGROUND

Please describe your company and position.

I am the CEO

Describe what your company does in a single sentence.

Help K12 schools improve student behavior through points and rewards.

OPPORTUNITY / CHALLENGE

What specific goals or objectives did you hire BD Emerson to accomplish?

• SOC 2 compliance

SOLUTION

How did you find BD Emerson?

Referral

Why did you select BD Emerson over others?

• Pricing fit our budget
• Great culture fit
• Company values aligned

How many teammates from BD Emerson were assigned to this project?

2-5 Employees

Describe the scope of work in detail. Please include a summary of key deliverables.

Our innovative platform, designed to enhance school environments through rewarding positive student behavior, faced a pivotal challenge in its expansion journey. As it partnered with larger school districts, it needed to demonstrate its security and privacy policies through a third-party SOC 2 audit, a critical trust and compliance benchmark for service providers. 
Recognizing the complexity of this requirement, we enlisted BD Emerson’s expertise. Over just three months, BD Emerson transformed our security and privacy posture, successfully prepared for their SOC 2, and raised the bar for practices in the ed tech industry.

RESULTS & FEEDBACK

What were the measurable outcomes from the project that demonstrate progress or success?

• SOC 2 preparation
• Pre-audit review and artifacts
• Consulting and coaching
• Managed compliance

Describe their project management. Did they deliver items on time? How did they respond to your needs?

Timely, proactive communication.

What was your primary form of communication with BD Emerson?

• Virtual Meeting
• Email or Messaging App

What did you find most impressive or unique about this company?

We appreciate their great culture. Flexible and fast-paced. Many former military employees.

Are there any areas for improvement or something BD Emerson could have done differently?

No