Fable

Fable builds a best-in-class security program that exceeds enterprise customer expectations

After the audit, Fable simplified the process of getting and maintaining compliance and attained a single source of truth for their entire information security program

SOC 2 Type 2 audits and InfoSec programs
A single source of truth for information security
An information security program to be proud of

Fable Tech Labs Inc. (“Fable”) connects digital teams to people with disabilities for the purpose of research and accessibility testing. Its platform enables an equitable exchange where businesses can benefit from the experiences of people with disabilities to build more inclusive products and people with disabilities can earn a source of income for their time and expertise.

Fable empowers some of the biggest Fortune 500 companies, including Slack, Shopify, and Walmart. The company wanted to get SOC 2 Type 2 compliance to provide their enterprise customers with an enterprise information security program.

Get a SOC 2 Type 2 audit and maintain an InfoSec program without security expertise

Fable was looking to level-up their security posture to meet and exceed the security needs of their Fortune 500 customers. Naturally, there were concerns the company wouldn’t have the bandwidth or resources to commit to a full SOC 2 project. They needed a tool that would integrate with the team and reduce lift.

A company that sells to enterprise companies, Fable was also overwhelmed by security questionnaires. According to Abid Virani, the COO at Fable: "Every time we had to fill out a new security questionnaire, it felt like we were starting from scratch." The company wanted to increase efficiency during the tech due diligence process, so they could spend more time building relationships and less time processing paperwork.

A single source of truth for information security

Fable now has what Virano calls a single source of truth for all their information security program documentation.

They can easily manage policies, from assigning policy reviewers to versioning. Instant reminders enable them to stay on top of all their security and compliance tasks, which means they can confidently share their program with customers when needed.

By automating security questionnaires and relying on the platform to surface the right answers, Fable’s account executives can cultivate stronger relationships with customers, pursue more opportunities, and increase sales output.

"[It’s a] tool we can rely on moving forward. It provides us with guidance and a bunch of useful project management features. For instance, it assigns tasks to individual stakeholders for evidence collection and includes due dates," said Virani. "It also integrates smoothly with our team. It ensures stakeholders understand their responsibilities and makes it easy to complete them."

Abid Virani, COO, Fable

An information security program to be proud of

As of May 6, 2021, Fable is officially SOC 2 Type 2 compliant. Thanks to the team’s hard work, commitment to information security, and help from a dedicated platform, the process was painless.

After the audit process, Fable noted two significant benefits. First, software simplified the process getting and maintaining compliance, which is important, as Fable intends on staying SOC 2 compliant over the long-term.

Second, the team now has a single source of truth for their entire information security program. Ongoing management of access policies, onboarding and offboarding, evidence collection tasks and policies is now easy for the team.

Virani is already looking to the future for ways to scale his program and continue offering his customers best-in-class security.

Furthermore, these two benefits have given the team confidence. "When we talk to companies like Walmart or Shopify, they need to know our systems are secure. The platform allows us to talk to customers with confidence and provide them with complete transparency," said Virani. “We’re happy to show customers what’s under the hood because we’re proud of what they’ll find.”

When a company invests in its information security off the bat the way Fable has, it becomes easier to maintain and scale. Today, Fable can provide its customers with a high-level of security assurance and prove that when it comes to cybersecurity, it doesn’t just talk the talk.

Fable

Fable builds a best-in-class security program that exceeds enterprise customer expectations

Table of contents

Get a SOC 2 Type 2 audit and maintain an InfoSec program without security expertise

A single source of truth for information security

An information security program to be proud of

You may also like

Third-Party Risk

Live Demo EMEA: Building a robust third-party risk management program with OneTrust

Join to explore how OneTrust's TPRM solution can revolutionize your third-party risk management approach. We will cover best practices for implementing and leveraging the software to minimize risks.

October 10, 2024

Third-Party Risk

APAC - Third-party risk management and due diligence: What’s the difference and why does it matter?​

Join this APAC webinar to learn the unique competencies of third-party risk and due diligence programs and examine when and how to align them to maximize the effectiveness of each.

September 18, 2024

Third-Party Risk

Third-Party operational risk: Shifting from reliance to resilience

Join this webinar to learn best practices for building a resilient third-party ecosystem and maintaining operational continuity in the face of unforeseen challenges.

August 15, 2024

Technology Risk & Compliance

Tech risk & compliance masterclass: The anatomy of a framework

Master the fundamentals of constructing robust compliance frameworks that can seamlessly integrate with organizational operations while aligning with regulatory and strategic mandates to deliver measurable insights on your progress and gaps.

August 14, 2024

Technology Risk & Compliance

Tech risk and compliance masterclass

Unlock tech risk management & compliance excellence. Master risk management, build robust frameworks, and foster cross-functional collaboration for long-term resilience.

August 07, 2024

Technology Risk & Compliance

Introducing OneTrust Compliance Automation

Join us as we explore OneTrust Compliance Automation, a holistic and fully integrated solution that streamlines and optimizes workflows, compliance, and attestation.

July 25, 2024

Trust Intelligence

TPRM Virtual Roundtable Series

Join the series of expert Roundtables on the topic of Third Party Risk Management

July 01, 2024

Third-Party Risk

TPRM privacy compliance: Questions to ask when working with third parties

Download this checklist to learn what questions to ask when designing a third-party risk management program that enables privacy compliance.

May 31, 2024

GRC & Security Assurance

Empowering your cyber defense: Key insights into the latest NIST CSF update with PwC

Join this webinar with OneTrust and PwC and gain insights into the upcoming NIST CSF update and learn how to effectively deploy it across your organization.

May 08, 2024

Third-Party Risk

Streamline compliance with the Digital Operational Resilience Act (DORA)

Download our infographic to learn about the new DORA regulation, who needs to comply, and how OneTrust can help streamline the process.

April 29, 2024

Third-Party Risk

5 Best practices for increasing resilience when working with third parties webinar

Learn how to leverage financial, operations, compliance, ESG, and cyber scores to drive resilience insights and detect possible supply chain disruptions.

April 18, 2024

GRC & Security Assurance

Certification Automation live product demo

Learn how OneTrust Certification Automation can help you scope, track, and manage security compliance holistically across complex operations.

April 10, 2024

Third-Party Risk

OneTrust third-party management demo video

Watch this demo video to learn how OneTrust third-party management helps organizations create resilient, secure, and scalable third-party ecosystems.

April 04, 2024

Third-Party Risk

6 steps to effective third-party risk management

See the path to managing third-party risk effectively with a checklist that outlines the six steps for a sound TPRM program.

March 29, 2024

Third-Party Risk

TPRM privacy compliance: 10 best practices when working with third parties

How can you build a privacy-focused TPRM program? In this webinar, we discuss best practices for privacy compliance when working with third parties, from onboarding to offboarding.

March 13, 2024

Technology Risk & Compliance

Rethinking risk assessments: Bridging the gap between best practices and action

Download our infographic to learn the main challenges faced during risk assessments, proven frameworks for assessing risks, and how to translate guidance into action.

March 07, 2024

Third-Party Risk

6 must-know trends in third-party management

Watch this video for the five top trends shaping the third-party management industry this year.

February 15, 2024

Technology Risk & Compliance

5 automation trends to modernize InfoSec compliance

Join our webinar for insights on transforming InfoSec program management. Navigate the complexities of modern security with a flexible, scalable, and cost-effective approach.

February 07, 2024

Third-Party Risk

APAC - Third-party risk management and due diligence: What’s the difference and why does it matter?