3 ms·
I'm not saying that no human being has ever derived value from a SOC2. I'm saying that the process around SOC2 is a grift. The fact that it also causes harm to
by staticassertion 6y ago
I'm not saying that no human being has ever derived value from a SOC2. I'm saying that the process around SOC2 is a grift.
The fact that it also causes harm to small companies, and detracts from resources for companies that actually care about security, just makes it a particularly harmful grift.
- Kalium 6y agoI agree. I think if there was a better standardized process for getting all the same information, I would use it preferentially in a heartbeat. From experience, trying to replicate all that info-gathering process manually is not a good answer.