4 ms·
So how would you look to get assurance over third parties without SOC reports? I am happy to concede that SOC reports are terrible, but at the moment they are
by Khaine 6y ago
So how would you look to get assurance over third parties without SOC reports?
I am happy to concede that SOC reports are terrible, but at the moment they are one of the few effective ways to get assurance over third parties.
- staticassertion 6y agoAs I said in another post, > This is a very hard problem. It's a regulation on a quality that is a very fast moving target with weak consensus. Doing this in a regulatory way just isn't viable today. > the few effective ways I disagree that they're effective. I don't think they are. Lots of companies with a SOC2 are breached, no company that people consider 'very secure' has earned that reputation due to SOC2 (or any other compliance for that matter).