News for hackers. Stuff that matters.
Re:GitHub Is Down by sgt on Monday February 09, 2026 @01:26PM (#46948879)
Does SOC2 itself require that or just yours? I'm not too familiar with SOC2 but I know ISO 27001 quite well, and there's no PR specific "requirements" to speak of. But it is something that could be included in your secure development policy.
Re:GitHub Is Down by badgersnake on Monday February 09, 2026 @01:31PM (#46948956)
Yeah, it’s what you write in the policy.
Re:GitHub Is Down by swiftcoder on Monday February 09, 2026 @01:34PM (#46948988)
And it's pretty common to write in the policy, because its pretty much a gimme, and lets you avoid writing a whole bunch of other equivalent quality measures in the policy.