3 ms·
I worked for a SOC2 and ISO27001 cert outfit. Real security starts with a good security culture. Audit and compliance assures audit and compliance passes not a
by iasay 4y ago
I worked for a SOC2 and ISO27001 cert outfit.
Real security starts with a good security culture. Audit and compliance assures audit and compliance passes not a good security culture.
While I respect that the two are independent, being audited doesn’t mean your customers aren’t at risk or you care about them.
- tptacek 4y agoDid you get any other message from this post? I'd like to think I just wrote the most SOC2-cynical "we just got SOC2" post that has ever been written, but if you've got a better example, I'd dearly love to read it.
- iasay 4y agoI would love to write it but I would probably be sued instantly. That's all I'm saying and that says a lot :)