This week in the Vanta Community
This week in the Vanta Community
Members we met in 🔒[private feed]: Griffin N. omieibi.bagshaw Allen H.
New members we welcomed this week and last week (please share your intro in 🔒[private feed] when you're ready!) john.costa ankur.palkar zac Armin N. Haralambos B. mariald mkhokhar Nana K. Vlad S. OlimpiuGD Pete J. Tudor L. danwilliams Ivan S. Pablo A. ramon Hunter M. yassin w. cstark oussama.benzaouia Janet Y. Pablo A. Clement U. bobbystoskopf matej.perkovic Stephanie E. martha.george Maggie M. Vlad S. Kari D. Darshil S. Loyal B. Aimee H. Kelly S. Brandon B. Alex T. Francisco P. Fernanda G. Ben L. Alex K. Kerry S. tyler460 jacob.barnes rafael.martinezmontie Leo Phil M. Jeffrey G.
All-things AI Governance and Vanta with GRC expert, Kareem M.
You don't want to miss this, esp after VantaCon. Register here
Comunidad LATAM
¿Hablas español? Conoce a otros clientes de Vanta, comparte ideas y haz preguntas en nuestra comunidad privada de LATAM aquí. ¡Únete ahora! cc: Erick M.
Who wants to be featured at VantaCon?
Read here for more (you do not need to be attending in-person to participate
Congrats, Aditya R. and team!
Discussion-starters and highlights: Please jump into these conversations and offer your POV
Clement U. is planning compliance for a fintech platform from scratch: SOC 2 Type II, ISO 27001, ISO 42001, NIST AI RMF and NIST SP 800-171. What order should he tackle them in? Greg B. B. has already shared a smart plan, so add yours. Respond with your POV here
Jake T. wants to run his annual pentest in staging, not production. He plans to back it up with config comparisons, infrastructure-as-code commit IDs and a sign-off from leadership. Is that enough for a SOC 2 Type II audit? Respond with your POV here
Collin R. wants to run access reviews for specific Microsoft Entra groups in Vanta. Should he upload the group members by hand, or use the synced groups under Personnel? Share your setup here
Any UK or EU teams running FedRAMP Moderate? Harry R.. has one US engineer covering both the GRC work and the FedRAMP environment, and wants to know how you manage the workload. Respond with your POV here
How are you showing auditors you meet ISO 27001 control A.6.5 (responsibilities after someone leaves or changes roles)? Fawaz wants to know what evidence you provide. Respond with your POV here
UK folks: Abbie V. is looking for free ways to meet GOV-108 (contact with special interest groups). Share your recs here
Rachael H.'s team uses Macs, and she needs an IT provider that can also manage their devices (MDM). Share your rec here
so if you care to find me, look to the western sky 🔒[private feed]