Private equity groups that buy companies they own

Re:Private equity groups that buy companies they own by pm90 on Thursday June 23, 2022 @01:33AM (#31845493)

SOX compliance is a huge PITA but has driven engineering changes that have made the orgs Ive worked at much more secure.

In particular, rules that require code reviews, auditing around production deployments, regular patching and exercising backup/recovery mechanisms have all made the systems Ive worked on operationally resilient.

It does depend on what kind of expertise your compliance team has (or the 3rd party tool you might use). But followed in spirit, SOX regulations have probably been a net benefit.

[ Parent | on HN ]

Re:Private equity groups that buy companies they own by blowski on Thursday June 23, 2022 @02:35AM (#31845825)

I thought SOX was mostly financial. What you’re saying here sounds more like SOC. are they connected?

[ Parent | on HN ]

Re:Private equity groups that buy companies they own by pm90 on Thursday June 23, 2022 @04:06AM (#31846304)

You can think of SOX as RFC and SOC2 as an implementation of it.

https://www.logicgate.com/blog/a-comparison-of-soc-and-sox-c...

[ Parent | on HN ]

Re:Private equity groups that buy companies they own by solar-ice on Thursday June 23, 2022 @07:57AM (#31847802)

SOC 2 is the bit that changes how software development is done, and has literally nothing to do with SOX, even according to that article.

[ Parent | on HN ]

Re:Private equity groups that buy companies they own by collegeburner on Thursday June 23, 2022 @09:16AM (#31848652)

There is literally 0 requirement to implement SOC2 for SOX. They are not related at all aside from that a lot of organizations do both. I'm kinda curious now where you got this idea?

[ Parent | on HN ]