5 ms·

Wait, what screenshots?

• NovemberWhiskey 4y ago
  In my experience, massive reams of screenshots for evidence of process / tooling / etc. are the norm with auditors. I have in the past been asked to provide screenshots of source code even.
  • jameshart 4y ago
    Yes. Screenshots with the desktop clock included, because that way you can be sure of exactly when the screenshot was taken.
• deathanatos 4y ago
  Like the sibling, I've been through a SOC2 process, and there were screenshots, lots of screenshots, to try to "prove" things to the auditor. (I say "prove", as sometimes the question is malformed, and so you're trying to make the best of it as you can.)
• ceejayoz 4y ago
  Yes. Screenshots of resolved security tickets, screenshots of 2FA being required in the Google Apps console, etc.