> Information security isn't just about software and hardware -- it's at least as much about policies and processes. I recently came across these, which really

> Information security isn't just about software and hardware -- it's at least as much about policies and processes. I recently came across these, which really helped me to understand the basics: - https://fly.io/blog/soc2-the-screenshots-will-continue-until-security-improves/ https://fly.io/blog/soc2-the-screenshots-will-continue-until... - https://scrty.io https://scrty.io - https://latacora.micro.blog/2020/03/12/the-soc-starting.html https://latacora.micro.blog/2020/03/12/the-soc-starting.html It was an informative read for someone who had paid little attention to this stuff.