3 ms·

Seems crazy that anyone (startups and buyers) would trust these guys for audit. Shows the “compliance theatre” of what SOC2 has become

• progbits 6mo ago
  It's always been one. Every single technical auditor I've dealt with has been majorly incompetent and wanted to do things that would decrease security. And these were not some cheap bottom of the barrel companies but the big "industry leaders".
  • raverbashing 6mo ago
    Never forget https://serverfault.com/questions/293217/our-security-auditor-is-an-idiot-how-do-i-give-him-the-information-he-wants https://serverfault.com/questions/293217/our-security-audito...
    • sheiyei 6mo ago
      Oh my, that is so funny and terrifying, but also exactly what my first expectation is for a consultancy firm