BARR Advisory

Leading provider of IT governance, risk, and compliance services: SOC 1, SOC 2, SOC 3, PCI DSS, HITRUST, HIPAA, ISO 27001, CMMC, and more.

[BARR Advisory @barradvisory]

Compliance shouldn’t slow down your business growth—it should accelerate it. 🚀

Our new Compliance Compass empowers business leaders to identify compliance goals, map out actionable steps, and avoid common missteps. Start here: https://t.co/RaOhnSx2mG

#Audits #StartupCulture

[BARR Advisory @barradvisory]

We recently completed our latest peer review—and we’re excited to share that we have yet again passed with flying colors. 🚀

Peer reviews serve as an external validation of our methods, ensuring our work meets strict professional guidelines. We’re proud that BARR has received the highest rating of pass on all peer reviews since our founding, demonstrating our consistent commitment to quality and excellence.

Learn more about how we ensure that each engagement we deliver meets the highest standards: https://t.co/bzOku8Krew

#PeerReview #Compliance #SecurityCompliance

[BARR Advisory @barradvisory]

HIPAA compliance isn’t a one-time checklist—it’s the foundation of protecting patient data and building trust. 🔒

Whether you're a healthcare provider, health plan, or business associate, understanding where PHI lives, assessing risk, and implementing the right safeguards are critical first steps.

Learn how to build a strong HIPAA compliance foundation and strengthen your security posture: https://t.co/N6OEWQPA9o.

#HIPAA #HealthcareSecurity #Cybersecurity #Compliance

[BARR Advisory @barradvisory]

Big news from BARR Advisory: We are officially a CMMC Third-Party Assessor Organization (C3PAO)! 🛡️

As a #C3PAO, BARR is authorized to perform formal certification assessments for organizations pursuing #CMMC Level 2 compliance. This designation allows us to help defense contractors and suppliers navigate the complexities of CMMC with confidence.

🗞️ Read the full announcement here: https://t.co/xIsDpZVCvh

[BARR Advisory @barradvisory]

Learn more about how we promote diversity and inclusion in the workplace: https://t.co/9qSl21qrwj

[BARR Advisory @barradvisory]

Happy Pride Month! 🏳️‍🌈 During June and throughout the year, BARR Advisory is proud to champion inclusion in tech.

“Leading with inclusion is the foundation of everything we do at BARR,” said Lauren Hannawald, Learning and Organizational Development Manager at BARR. “When we all have the freedom to be our whole selves, we are one step closer to a more inclusive world.”

#Pride #PrideMonth

[BARR Advisory @barradvisory]

Our consulting team has pulled together five must-read news stories for cybersecurity professionals this month. 🗞️

Find out what they've been reading in May's edition of Take5️⃣: https://t.co/oK8bqwe7zz

#CybersecurityNews #CISA #Ransomware

[BARR Advisory @barradvisory]

For healthcare organizations, safeguarding sensitive data isn’t just a technical responsibility—it is a business imperative.

But how do you know where to start—or where to go next? 🧭

We’ve published a comprehensive guide for every stage of your compliance journey. Download now for free—no log-in required: https://t.co/X4mUGAUTxh

#Healthcare #HealthcareSecurity #HIPAA

[BARR Advisory @barradvisory]

BARR's offices are closed today as we observe Memorial Day. 🇺🇸

On this day, we pause to remember and honor the brave individuals who made the ultimate sacrifice in service to our country.

[BARR Advisory @barradvisory]

Not all pentests are created equal.

But what role do auditors, consultants, and third-party risk analysts play in evaluating pentest quality?

BARR Cybersecurity Consulting Manager Larry Kinkaid breaks it down in an in-depth guide. 📍 Read here: https://t.co/JJK62as6hk

#PenTest #PenTests #SecurityAudit #SecurityAuditor

[BARR Advisory @barradvisory]

Healthcare organizations face a tough compliance question:

👉 Is SOC 2 enough?
👉 Or is HITRUST the better path?

The answer depends on your growth goals, customer expectations, regulatory pressure, and how much assurance you need to provide. Our latest blog post explains:

✔️ The real differences between SOC 2 and HITRUST
✔️ When healthcare companies should choose one over the other
✔️ Why some organizations pursue both
✔️ How to avoid wasting time and budget on the wrong framework

Read it now: https://t.co/NyPFJULp28

[BARR Advisory @barradvisory]

Downtime isn’t just inconvenient — it can damage trust, disrupt operations, and impact your bottom line. That’s why the SOC 2 availability trust services criteria matters.

In our newest blog post, you’ll learn how the availability criterion helps organizations ensure systems remain operational, resilient, and accessible when customers need them most. Availability in SOC 2:

✔️Means reliable, resilient systems achieved through scalability, redundancy, backups, and disaster recovery.
✔️Requires continuous monitoring, quick incident response, and maintenance.
✔️Is measured against service level agreements—strong availability builds trust and reduces downtime impact.

Read more: https://t.co/C2zXBFU6xM.

#SOC2 #TrustServicesCriteria #Cybersecurity #Compliance

[BARR Advisory @barradvisory]

💡 Learn more about our coordinated audit approach: https://t.co/VFmJKXl9Mx

[BARR Advisory @barradvisory]

Did you know? 💡 BARR Advisory is part of an elite group of U.S. firms that is eligible to audit against all of the top security compliance frameworks, including SOC 2, ISO 27001, HITRUST, and PCI DSS.

This means we can save you time and resources through our coordinated audit approach. 🚀

BARR’s Head of Healthcare and Payment Protection Services Steve Ryan explains more below. 👇

#SecurityCompliance #HITRUST #PCIDSS

[BARR Advisory @barradvisory]

To support our team in making health and wellness a priority, BARR Advisory is closed on Friday, May 1 for a company-wide mental health day.

💙 May is Mental Health Awareness Month, a national movement dedicated to eradicating stigma, extending support, fostering public education, and advocating for policies that prioritize the well-being of individuals and families affected by mental illness.

🧡 At BARR, we are dedicated to cultivating an environment where prioritizing mental health and personal well-being is encouraged not just today, but every day.

[BARR Advisory @barradvisory]

🚨 Engineering for FedRAMP? You might be missing more than you think.

Too many companies treat FedRAMP like a checkbox exercise when it’s actually a full-scale product, security, and business transformation.

In our newest blog post, we break down 5 critical things most companies overlook—from architecture decisions to long-term operational realities—and how to avoid costly missteps.

Read it now 👇
https://t.co/5rPnSl8eKI.

#FedRAMP #FedRAMPCompliance #Cybersecurity

[BARR Advisory @barradvisory]

Cybersecurity leaders are facing a growing trust crisis—and it’s not just about compliance anymore.

The latest HITRUST Trust Report reveals a stark reality:
• Third-party breaches are rising fast
• Traditional vendor assessments aren’t cutting it
• And over 40% of organizations have experienced a breach

Meanwhile, 99.62% of HITRUST-certified environments remained breach-free—showing that measurable, validated assurance works. The takeaway? Trust can’t be assumed. It has to be proven.

➡️ Read out latest blog post to learn more: https://t.co/Fc0dIcBcLL

#Cybersecurity #HITRUST #ThirdPartyRisk

[BARR Advisory @barradvisory]

During our annual company on-site in Kansas City last week, the BARR Advisory team was proud to donate time to support @Heart_to_Heart, a nonprofit organization that seeks to improve healthcare access around the world and ensure all people have access to quality care.

Giving back to our communities is just one way we continue to #RaiseTheBARR. 🚀

#campBARR

[BARR Advisory @barradvisory]

From cybersecurity news to upcoming tech events to the latest updates about BARR and our team members, you can find it all and more in our monthly newsletters. 🗞️

💡 Sign up today to stay in-the-know: https://t.co/ST4Y9aKEd6

[BARR Advisory @barradvisory]

What does processing integrity really mean in SOC 2—and why should your business care?

It’s more than a checkbox. It’s about ensuring your systems process data completely, accurately, and on time—every time. In today’s environment, that level of reliability builds real trust with customers and stakeholders.

If you’re navigating SOC 2 or just want to better understand the Trust Services Criteria, this breakdown makes it simple 👇

https://t.co/PfHZn9rO4W

#SOC2 #Compliance #Cybersecurity

[BARR Advisory @barradvisory]

The BARR Advisory team traveled to Kansas City last week for our annual company-wide meeting and training event. 🤝

While we value the flexibility of our remote-first culture, there’s no substitute for the collaboration that happens when we’re all in the same room. We spent the week reflecting on where we’ve been and creating a roadmap for where we’re headed. 🚀

#RaiseTheBARR #campBARR