What does a CPA have to do with Cybersecurity? A Conversation with Troy Fine, Compliance Meme King

What does a Certified Public Accountant have to do with Cybersecurity? This episode’s guest, Troy Fine, Senior Advisor at Geels Norton, is a Top Cybersecurity voice on LinkedIn and well known for his compliance memes.
Join us in Season 4, Episode 6 for a conversation around AI, automation, GRC tools, frameworks and the future of the audit space.
2 Cyber Chicks are Erika McDuffie and Jax Scott on Simply Cyber Podcast Network, every other Wednesday at 9:30 AM Eastern.
Learn more about Troy Fine and connect with him at / troyjfine .
2 Cyber Chicks:
Jax Scott, Founder of Outpost Gray @OutpostGray
Erika McDuffie, Managing Director with @coalfirecybersecurity
Jax Scott Socials:
X: @outpostgray
LinkedIn : / iamjax
@Medium @outpostgray
Erika McDuffie Socials:
/ erika-mcduffie-767394bb
Send email to 2 Cyber Chicks: [e-mail]
Simply Cyber's mission is to help purpose driven professionals make and and take a cybersecurity career further, faster.
📱 Social Media
Let's Connect: linktr.ee/SimplyCyber
🔥 The Best Free Cyber Resources
simplycyber.io/
📷 🎙 💡 MY STUDIO SETUP
kit.co/GeraldAuger/simply-cyb...
🙌🏼 Donate
Like the channel and got value? Please consider supporting the channel
www.buymeacoffee.com/SimplyCyber
😎 Merch 😎
👉🏼 Simply Cyber Branded Gear: www.simplycyber.io/store
Disclaimer: All content reflects the thoughts and opinions of Gerald Auger and the speakers themselves, and are not affiliated with the employer of those individuals unless explicitly stated.
#2cyberchicks #simplycyber #podcast

[@MyDancingirl]

Great interview, thanks Troy for providing insights. 💎

[@cpatocybersecurity]

Awesome show idea! I may be biased. Also what DOESN’T being a CPA have to do with cybersecurity? Protect the public, act with integrity, be curious, innovative, data-driven, have a continuous learning mindset and many more transferable skills. I’ll miss the live stream but look forward to the recording!

[@stonesphanphish]

Great show!!

[@Sabina.D.]

Great interview. I am in transition from accounting world to GRC. It is so related to my current situation. I got my MS in cybersecurity while I am working as an accountant 😅

[@cpatocybersecurity]

Kudos and good luck getting after it!

[@Sabina.D.]

@@cpatocybersecurity thank you

[@jamesdriscoll1658]

I have never read the SOC2 guide. I do like reading the NIST frameworks though.

[@cpatocybersecurity]

From my experience with both I prefer the NIST CSF style organization of functions and outcomes left and right of boom vs the SOC2 trust services criteria. However, I prefer SOC2 audit procedure requirements in terms of providing assurance for a defined past period financial reporting style vs a FedRAMP style point in time inspection. Also good is the flexibility of SOC2 to scale to the needs of the service being audited. It's not prescriptive and can be done well with a good practitioner. If you do take a look at SOC2 I'd be interested to hear your impression and hot take!