alt Hacker NewsSeems crazy that anyone (startups and buyers) would trust these guys for audit.
Shows the “compliance theatre” of what SOC2 has become
Seems crazy that anyone (startups and buyers) would trust these guys for audit.
Shows the “compliance theatre” of what SOC2 has become
It's always been one.
Every single technical auditor I've dealt with has been majorly incompetent and wanted to do things that would decrease security. And these were not some cheap bottom of the barrel companies but the big "industry leaders".