News for hackers. Stuff that matters.

A comment on Show HN: Ex-Deloitte auditor open-sourced the whole SOC 2 method for your AI. Parent comment

Re:Show HN: Ex-Deloitte auditor open-sourced the whole SOC 2... by devy on Tuesday August 04, 2026 @12:40PM (#49171343)
Is this how every auditor does though or just you/Deloitte? SOC 2 is a set of guidelines, not mandates, there is one size fits all and every org may design their own security controls based on their unique systems. Is that the same philosophy on the auditing side as well?
[ Parent | on HN ]
Re:Show HN: Ex-Deloitte auditor open-sourced the whole SOC 2... by yylyyl on Tuesday August 04, 2026 @12:47PM (#49171445)
The method is mine. How I test, what evidence I accept, how I call a deviation. Every firm has their own methodology but none of them publish it.
[ Parent | on HN ]