Re:GitHub Is Down
by sgt on Monday February 09, 2026 @01:26PM
(#46948879)
Does SOC2 itself require that or just yours? I'm not too familiar with SOC2 but I know ISO 27001 quite well, and there's no PR specific "requirements" to speak of. But it is something that could be included in your secure development policy.
[ Parent
| on HN ]
Re:GitHub Is Down
by badgersnake on Monday February 09, 2026 @01:31PM
(#46948956)
Yeah, it’s what you write in the policy.
Re:GitHub Is Down
by swiftcoder on Monday February 09, 2026 @01:34PM
(#46948988)
And it's pretty common to write in the policy, because its pretty much a gimme, and lets you avoid writing a whole bunch of other equivalent quality measures in the policy.