3 ms·
A lot of enterprise / financial compliance processes require adhering to an ISO or NIST framework. Has anyone created a tl:dr checklist of these, like Sqreen h
by mushufasa 7y ago
A lot of enterprise / financial compliance processes require adhering to an ISO or NIST framework.
Has anyone created a tl:dr checklist of these, like Sqreen has done with their "Startup CTO Checklist?" https://www.sqreen.com/checklists/saas-cto-security-checklist https://www.sqreen.com/checklists/saas-cto-security-checklis...
- twunde 7y agoWithin the US, SOC2 is the enterprise security compliance program of choice, although the reality is that ISOs, NIST, SOC2, HITRUST are largely overlapping. Because these security frameworks are already checklists, there aren't any tl;dr checklists that I know of. The closest thing is Comply: https://github.com/strongdm/comply https://github.com/strongdm/comply which has the rules for SOC2 and pre-written policy templates