Do you have Cybersecurity problems that keep you up at night? If so, what are they??
Steve Daniels
6 replies
Replies
π¨ Travis Page π¨@travis_page
SOC2 compliance lol
Share
Bleach Cyber
@travis_page yea fairly standard! Thereβs always a downward pressure to conform to on standard or the other. Is yours because of a customer requirement or is it industry mandated?
@steve_daniels2 It's definitely both. Enterprise deals nearly always require SOC2 compliance, but its really just best practice to have controls and procedures in place. The problem is: the compliance testing is ongoing and to get started, its in the 5-figure range.
Bleach Cyber
@travis_page yea its not ideal, most startups and small business really struggle with this! Generally because they don't have the know how , time, funds...... I mean 5 figures just to be audited is nuts.... especially when you throw in the other associated costs for things like technical controls, the people to use them. Are you using a GRC platform?
Actually, I don't have any serious problems since each part of my development has effective tools. Anyway, some people prefer to use cybersecurity as the main part of development and I fully support this idea. Besides, recently I accidentally found this SOC cybersecurity and it has helped me to optimise my projects. Have you ever tired to use anything like that? I think it's reasonable.