4 ms·
I’ve never visited a datacenter that wasn’t SOC2 compliant. Bahnhof, SAVVIS, Telecity, Equinox etc. Of course, their SOC 2 compliance doesn't mean we are absol
by dijit 2y ago
I’ve never visited a datacenter that wasn’t SOC2 compliant. Bahnhof, SAVVIS, Telecity, Equinox etc.
Of course, their SOC 2 compliance doesn't mean we are absolved of securing our databases and services.
Theres a big gap between throwing some compute in a closet and having someone “run the closet” for you.
There is, a significantly larger gap between having someone “run the closet” and building your own datacenter from scratch.
- wutwutwat 2y agoA datacenter being soc2 compliant doesn’t mean any of your systems are. Same with pci. Same with hipaa. Cloud providers usually have offerings that help meet those requirements as well, but again, you can host bare metal, colo, cloud, or a tower under your bed, their compliance doesn’t do anything to cover your compliance.
- bigfatkitten 2y agoThey do cover your physical security requirements, which is still important.
- dijit 2y agoYes, quite right, that’s what I meant with my “I still have to do the work of securing my services”. Would be the same no matter where I’m hosted. Going to guess you meant to reply to the parent though?