News for hackers. Stuff that matters.

A comment on Hackers last year conducted a 'dry run' of SolarWinds breach. Parent comment

Re:Hackers last year conducted a 'dry run' of SolarWinds breach by vhodges on Sunday December 20, 2020 @04:15PM (#25489586)
I am NOT well versed (so standard disclaimers apply :) but

https://latacora.micro.blog/2020/03/12/the-soc-starting.html

says that SOC2 is (mostly) about sales and little about validating security practices, only that you have them. I find it telling that SOC2 audits are performed by accountants.

[ Parent | on HN ]
Re:Hackers last year conducted a 'dry run' of SolarWinds breach by throwaway201103 on Sunday December 20, 2020 @05:11PM (#25490019)
Even a financial audit is based on what the company tells the auditors and is about whether the financial reporting conforms to generally accepted principles, not whether it's actually correct.
[ Parent | on HN ]