alt Hacker NewsSure, yes. The way I understand SOC2 relies on the auditors to set the effective standard. So it really depends who audited you
Replies
_hyn3 • yesterday at 8:20 PM
If SOC2 relies on competent auditors (and you're right, it does), than it is an ineffective standard (and it mostly is).
SOC2 auditors are accountants. A SOC2 auditor verifies only that you're doing what you say what you're doing.