2 ms·
Actually yes, most of those things are required for SOC 2 which is verified by an independent auditor and visible in their report.
by cyrnel 2y ago
Actually yes, most of those things are required for SOC 2 which is verified by an independent auditor and visible in their report.
- marcus0x62 2y ago1) I’m going to go out on a limb and guess Lastpass, Okta, et al., WERE and ARE SOC2 type II certified. Didn’t stop them from getting breached. 2) SOC2 is defined by the American Institute of Certified Public Accountants. That it is held up as some sort of exemplary cyber security standard is absolutely ridiculous.