3 ms·
SOC 2 stands for System and Organization Controls (SOC) 2 and is a comprehensive reporting framework put forth by the American Institute of Certified Public Acc
by Khaine 6y ago
SOC 2 stands for System and Organization Controls (SOC) 2 and is a comprehensive reporting framework put forth by the American Institute of Certified Public Accountants (AICPA) in which independent, third-party auditors (i.e., CPA’s) perform an assessment and subsequent testing of controls relating to the processes in scope
- emilsedgh 6y agoIn reality, it's a get-out-of-free-card for the companies who are supposed to do a due diligence on your company's security. You have a service. They want to make sure it's secure before working with you. They ask you to get this compliance done. But the compliance, as mentioned in this article, doesn't really make sure your service is secure. It just makes sure you follow some security practices. The "actual" reason big enterprises require SoC2 is not security. If something goes wrong, certain people within that enterprise are gonna be responsible for making the decision to work with you in the first place. Having SoC2 in place makes sure those people can say "we did our homework".