Re:Inside the Massive Alleged AT&T Data Breach
by alephnerd on Tuesday March 19, 2024 @11:07AM
(#39756500)
> ATT is equally responsible for data leaks from companies they share data with.
Liability from 3rd party breaches are avoided if the 3rd party has shown that they did their due diligence in maintaining their security.
If they show that they are in SOC 1/2 compliance along with other similar compliance frameworks, that is enough.
> auditing is rigorous
Having dealt with and seen this from SMEs to F10s I guarantee you it's nowhere near as rigorous as you expect, and that this is a common issue across all organizations - even some darlings on HN that people view as deeply technical.
Liability from 3rd party breaches are avoided if the 3rd party has shown that they did their due diligence in maintaining their security.
If they show that they are in SOC 1/2 compliance along with other similar compliance frameworks, that is enough.
> auditing is rigorous
Having dealt with and seen this from SMEs to F10s I guarantee you it's nowhere near as rigorous as you expect, and that this is a common issue across all organizations - even some darlings on HN that people view as deeply technical.
Everyone has their pants off.