3 ms·

Is there anything relevant to recovery / graceful functional degradation in SoC2? If not, this feels like an obvious match there. E.g. "Company has a defined

by ethbr1 2y ago

Is there anything relevant to recovery / graceful functional degradation in SoC2? If not, this feels like an obvious match there. E.g. "Company has a defined and demonstrated process by which they can (a) offer degraded but limited functionality in the event of full system outage & (b) accept data updates via a backup method, until system restoration." Sure would have helped with Change Healthcare...

quercusa 2y ago
I think you have to have a tabletop exercise once a year. So all good, right?
- ethbr1 2y ago
  I mean, better than not. Everytime I see something basic in a standard, it makes me realize there were businesses out there who weren't doing anything of the sort.