DEV Community

#soc2

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Your first SOC 2: the seven controls a five-person team should fix first

Your first SOC 2: the seven controls a five-person team should fix first

Comments
2 min read
Starting your first SOC 2 in 2027? The criteria change probably doesn't apply to you yet

Starting your first SOC 2 in 2027? The criteria change probably doesn't apply to you yet

Comments
2 min read
AI-Use Controls for Penetration Testing Firms: A 2026 Category Matrix

AI-Use Controls for Penetration Testing Firms: A 2026 Category Matrix

Comments
5 min read
Crafting Incident Response Plans that Fulfill ISO 27001 and SOC 2

Crafting Incident Response Plans that Fulfill ISO 27001 and SOC 2

Comments
4 min read
Penetration Testing for Compliance: Key Expectations

Penetration Testing for Compliance: Key Expectations

Comments
4 min read
Category Matrix for 2026

Category Matrix for 2026

Comments
5 min read
2026 Category Matrix: Matching Security Testing Providers to Buyer Needs

2026 Category Matrix: Matching Security Testing Providers to Buyer Needs

Comments
5 min read
Six Expired Domains Can Hijack Your AI Agents: Notes From a 15,465-Server MCP Audit

Six Expired Domains Can Hijack Your AI Agents: Notes From a 15,465-Server MCP Audit

Comments
3 min read
SOC 2 Evidence From GitHub and Terraform, and the Part That Still Needs a Person

SOC 2 Evidence From GitHub and Terraform, and the Part That Still Needs a Person

5
Comments
16 min read
Your Threat Model Assumes Attackers Get Bored. Schneier's DEF CON Talk Says They Won't

Your Threat Model Assumes Attackers Get Bored. Schneier's DEF CON Talk Says They Won't

Comments
3 min read
Someone Claimed a Dead DNS Record and Got Military Base Call Logs by Morning

Someone Claimed a Dead DNS Record and Got Military Base Call Logs by Morning

Comments
3 min read
Your compliance tool saying you're "95% ready" is a liability, not a feature

Your compliance tool saying you're "95% ready" is a liability, not a feature

1
Comments
3 min read
GPT-6 Astra Fell in Under 24 Hours, and the Prompt Had Nothing Malicious in It

GPT-6 Astra Fell in Under 24 Hours, and the Prompt Had Nothing Malicious in It

Comments
4 min read
SOC 2: Understanding the Assurance Standard for Service Organizations

SOC 2: Understanding the Assurance Standard for Service Organizations

Comments
3 min read
SOC 2 readiness for open-source projects on a zero budget

SOC 2 readiness for open-source projects on a zero budget

Comments
2 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.