<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://certreports.com/blog</loc><lastmod>2026-11-02</lastmod><changefreq>weekly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-third-party-risk-management-tprm</loc><lastmod>2026-11-02</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-mtcs-singapores-cloud-security-standard</loc><lastmod>2026-11-01</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-get-a-vendors-soc-2-report-aws-azure-and-under-nda</loc><lastmod>2026-10-31</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-get-a-business-associate-agreement-signed-with-a-vendor</loc><lastmod>2026-10-30</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/data-processing-agreement-what-gdpr-requires-and-when-buyers-need-one</loc><lastmod>2026-10-29</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-a-trust-center-vendor-security-pages-vs-software-settings</loc><lastmod>2026-10-28</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-perform-a-vendor-risk-assessment-using-public-evidence</loc><lastmod>2026-10-27</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-irap-australias-information-security-assessor-program</loc><lastmod>2026-10-26</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-hds-health-data-hosting-vs-other-meanings</loc><lastmod>2026-10-25</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-bsi-c5-and-which-country-it-applies-to</loc><lastmod>2026-10-24</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/iso-27001-annex-a-controls-what-buyers-should-ask-for</loc><lastmod>2026-10-23</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/is-the-eu-ai-act-in-force-what-vendors-must-show-now</loc><lastmod>2026-10-22</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-nis2-and-what-it-asks-of-your-vendors</loc><lastmod>2026-10-21</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-secnumcloud-and-why-us-clouds-dont-have-it</loc><lastmod>2026-10-20</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-get-govramp-certified</loc><lastmod>2026-10-19</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/govramp-vs-fedramp-vs-stateramp</loc><lastmod>2026-10-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/cyber-essentials-vs-cyber-essentials-plus-for-buyers</loc><lastmod>2026-10-17</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/tisax-explained-what-the-al-levels-actually-mean</loc><lastmod>2026-10-16</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/ccpa-compliance-what-vendors-can-actually-show-you</loc><lastmod>2026-10-15</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-check-an-iso-9001-certificate-is-real</loc><lastmod>2026-10-14</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/iso-22301-business-continuity-what-vendors-publish</loc><lastmod>2026-10-13</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/iso-27017-vs-27018-what-vendors-actually-publish</loc><lastmod>2026-10-12</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-uk-gdpr-and-how-it-differs-from-eu-gdpr-for-vendors</loc><lastmod>2026-10-11</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-soc-3-and-why-vendors-publish-it-instead-of-soc-2</loc><lastmod>2026-10-10</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-hitrust-and-what-the-r2-i1-e1-levels-mean</loc><lastmod>2026-10-10</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-iso-27701-and-does-it-cover-gdpr</loc><lastmod>2026-10-03</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/is-gdpr-applicable-in-the-us-what-the-evidence-shows</loc><lastmod>2026-10-02</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-gdpr-compliance-and-what-vendors-can-show-you</loc><lastmod>2026-10-01</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/vendor-security-questionnaire-questions-the-public-record-already-answers</loc><lastmod>2026-09-26</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/iso-42001-ai-management-what-vendors-are-publishing</loc><lastmod>2026-09-25</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/cyber-essentials-explained-for-buyers</loc><lastmod>2026-09-24</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-check-a-vendors-subprocessor-list</loc><lastmod>2026-09-23</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-csa-star-and-does-it-matter</loc><lastmod>2026-09-22</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/hipaa-eligible-vs-hipaa-compliant-saas</loc><lastmod>2026-09-21</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-verify-a-fedramp-listing</loc><lastmod>2026-09-19</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/soc-2-vs-iso-27001-which-should-a-buyer-ask-for</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/state-of-public-compliance-evidence-2026</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/three-quarters-of-the-visa-registry-is-not-pci-validation</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/iso-27001-2013-what-the-index-saw</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/there-is-no-such-thing-as-soc-2-certified</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/soc-2-type-1-vs-type-2</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/what-is-a-bridge-letter</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-read-a-soc-2-report</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/how-to-read-a-trust-centre</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/baa-checklist</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/data-privacy-framework-appeal-what-buyers-should-do</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/data-privacy-framework-explained</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/fedramp-statuses-2026</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/pci-dss-registries</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/iso-27001-2013-transition</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/vendor-security-review-checklist</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/webhooks</loc><lastmod>2026-09-18</lastmod><changefreq>monthly</changefreq><priority>0.7</priority></url>
  <url><loc>https://certreports.com/blog/category/analysis</loc><lastmod>2026-11-02</lastmod><changefreq>weekly</changefreq></url>
  <url><loc>https://certreports.com/blog/category/explainers</loc><lastmod>2026-11-02</lastmod><changefreq>weekly</changefreq></url>
  <url><loc>https://certreports.com/blog/category/how-to</loc><lastmod>2026-11-02</lastmod><changefreq>weekly</changefreq></url>
  <url><loc>https://certreports.com/blog/category/index-notes</loc><lastmod>2026-11-02</lastmod><changefreq>weekly</changefreq></url>
  <url><loc>https://certreports.com/authors/solomon-amos</loc><lastmod>2026-11-02</lastmod><changefreq>monthly</changefreq></url>
  <url><loc>https://certreports.com/authors/certreports-research</loc><lastmod>2026-11-02</lastmod><changefreq>monthly</changefreq></url>
</urlset>