> Compliance is a byproduct of security engineering. Good security engineering has little to do with compliance. And SOC2 is not particularly good. So keep the

> Compliance is a byproduct of security engineering. Good security engineering has little to do with compliance. And SOC2 is not particularly good. So keep the concepts separate. It appears to be impossible to make people grasp this concept. So much wasted time talking at cross purposes about real security while other people in the room are talking about compliance and vice versa.