Cybersecurity Webinars - Risk Management and Compliance | HITRUST

The Assurance Gap: What 103 SOC 2 Reports Actually Showed Us

Written by HITRUST | Sep 16, 2026, 6:08:03 PM
AJ Yawn, Author and GRC Engineering Lead at Rippling, and HITRUST's Ryan Patrick open their Assurance Gap series by tracing how information security assurance evolved from a periodic compliance exercise into a core operating requirement, and why the artifacts we inherited from that evolution struggle under the weight now placed on them.
 
Watch the video to explore what organizations can learn from real-world assurance evidence and how teams can make more measurable, consistent, and defensible third-party risk decisions.