Does SoC 2 worth it?

Posted by adam_ftt on Sunday September 22, 2024 @07:13AM
from the self-post dept.

Do you think official soc 2 report worth for SMBs?

My experience is that most companies use security questionnaires / vendor risk assessments so if your company is prepared you don't need to have the official soc 2 attestation.

What is your experience?

( 1 comment | on HN )

Re:Does SoC 2 worth it? by elawler24 on Sunday September 22, 2024 @08:10AM (#41616492)

Eventually it becomes a requirement for closing deals with companies who have compliance requirements with their own customers. But it’s expensive and time consuming, so only worth it if it’s actually blocking large contracts. You can use something like Vanta when you’re ready.

[ Parent | on HN ]