The Schellman Blog

As more and more people turn to marijuana for relief, it’s become clear the legalization of cannabis plant growing and the drug product has opened up a new industry—in fact, the market size of the marijuana business is expected to skyrocket and reach $55.8 billion by 2025. With thirty-three states and the District of Columbia currently allowing some form of legal usage of the drug, the United States appears to be leading the way in legalizing marijuana. Most of this new legal use revolves around taking marijuana for medicinal purposes, as the use of the drug has been confirmed to help alleviate the symptoms of a number of illnesses, including multiple sclerosis (MS); however, marijuana has also been successful in subduing vicious side effects brought on by prescribed drugs against cancer.

The ultimate goal of a compliance program is not only to make sure your organization meets the requirements for compliance, but to also ensure employees do the right thing. But it can be difficult to determine the success of your organization’s compliance. What do you measure? How often do you measure? What do you focus on?

What if I don't want any IT General Controls in my SOC report?

What if my subservice organization will not provide me a management assertion letter for my SOC examination?

Can I have disaster recovery controls within my SOC 1 test of controls matrix?

Can I share my SOC 1 with a prospect while we are going through an RFP process?

Do we have to go through a formal risk assessment before our SOC 1?