4 ms·

I'm out of the loop, what is SOC2?

• barrkel 6y ago
  A sales hurdle for selling to larger orgs. A third party audit of your process (documentation, mostly) around managing risk.
• Khaine 6y ago
  SOC 2 stands for System and Organization Controls (SOC) 2 and is a comprehensive reporting framework put forth by the American Institute of Certified Public Accountants (AICPA) in which independent, third-party auditors (i.e., CPA’s) perform an assessment and subsequent testing of controls relating to the processes in scope
  • emilsedgh 6y ago
    In reality, it's a get-out-of-free-card for the companies who are supposed to do a due diligence on your company's security. You have a service. They want to make sure it's secure before working with you. They ask you to get this compliance done. But the compliance, as mentioned in this article, doesn't really make sure your service is secure. It just makes sure you follow some security practices. The "actual" reason big enterprises require SoC2 is not security. If something goes wrong, certain people within that enterprise are gonna be responsible for making the decision to work with you in the first place. Having SoC2 in place makes sure those people can say "we did our homework".
• lizknope 6y ago
  I clicked on the article thinking it was some kind of System On a Chip which is what I do for a living. I scrolled through the article, realized it was not for me, but I still don't know if it is an acronym or what it really does.