NerdCulture

0 posts0 participants0 posts today

Dr. HermanSJr.Industry's 1st & only book/#bible on <a href="https://mastodon.social/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a>/#governance for <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> for all <a href="https://mastodon.social/tags/enterprise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enterprise</a> & <a href="https://mastodon.social/tags/startups" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#startups</a> <a href="https://mastodon.social/tags/serviceProviders" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#serviceProviders</a> worldwide regarding <a href="https://mastodon.social/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a>, <a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>, <a href="https://mastodon.social/tags/InformationTechnology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InformationTechnology</a>."The Framework Efficiency Architect: Transforming SOC 2 Into A Monetization Weapon"More info at DrHermanSJr.carrd.co (last book at bottom).Launching late April 2025 as the first in a series covering major frameworks.Pre-sales, with an added free 1-hour consultation, available now at <a href="https://ko-fi.com/s/0727fa33a1" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ko-fi.com/s/0727fa33a1</a>.

passboltOver the last four months, passbolt underwent three independent assessments to evaluate and strengthen our security posture.These assessments help us identify and address areas for improvement while confirming our existing security strengths. Read more about the latest security reviews: <a href="https://hubs.li/Q039csDh0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hubs.li/Q039csDh0</a>See the findings in the thread.<a href="https://mastodon.social/tags/SecurityAudit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAudit</a> <a href="https://mastodon.social/tags/Cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptography</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mastodon.social/tags/PasswordSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordSecurity</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a>

Jeff Horton (Elbows Up CanElxn 2025)Had a call today with one of those security compliance vendors (eg SOC2 platform) stuff. I could have closed my eyes and been at a used car dealer.- What else are you looking at? Really wanted specific names. - I can do a deal, just need to check with finance - A number of add-ons available at 5k+ each - How long would you sign for? - Can fit so much automation and AI in this bad-boy you won't have to do anything.<a href="https://mstdn.ca/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mstdn.ca/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> <a href="https://mstdn.ca/tags/audit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#audit</a>

NosirrahSec 🏴‍☠️Need some help making sure what I'm writing for SOC2 compliance isn't pure shit, and since searching for anything SOC2 related just results in sales bullshit...Was hoping the community had resources saved from their own pains doing this.Anyone got resources related to writing up compliant policies for SOC2 compliance? I'm shooting out of my depth I feel going from engineering/infosec/operations to writing policies, but if I don't who will? lol<a href="https://infosec.exchange/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://infosec.exchange/tags/grc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#grc</a>

isecjobs.comHIRING: SOC 2 Manager, Audit and Certification / US and CA Multiple Locations👉 <a href="https://infosec-jobs.com/J107586/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec-jobs.com/J107586/</a><a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/infosecjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosecjobs</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/CyberCareer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCareer</a> <a href="https://mastodon.social/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/jobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobs</a> <a href="https://mastodon.social/tags/cyberjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyberjobs</a> <a href="https://mastodon.social/tags/jobsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobsearch</a> <a href="https://mastodon.social/tags/techjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#techjobs</a> <a href="https://mastodon.social/tags/hiring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hiring</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/Audit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Audit</a> <a href="https://mastodon.social/tags/Certification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Certification</a> <a href="https://mastodon.social/tags/NIST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NIST</a> <a href="https://mastodon.social/tags/HITRUST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#HITRUST</a> <a href="https://mastodon.social/tags/CSA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CSA</a> <a href="https://mastodon.social/tags/CCM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CCM</a>

passbolt🚀 <a href="https://mastodon.social/tags/Passbolt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passbolt</a> has successfully renewed its SOC2 Type II audited report, with no exception noted by the auditors, for the third time in a row! Contact us to review the report: <a href="https://hubs.li/Q02sxvf00" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hubs.li/Q02sxvf00</a><a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.social/tags/Compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Compliance</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>

Thijs KromhoutFairly simple question regarding <a href="https://infosec.exchange/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> reporting:Is it possible for an organization to decide not to do a type 1 assurance report and straight go for a type 2?Or should one always do type 1 and then type 2?

Marcel WaldvogelDer <a href="https://waldvogel.family/tags/Republik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Republik</a>-Artikel von <a href="https://chaos.social/@adfichter" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@adfichter</a> zu <a href="https://waldvogel.family/tags/Xplain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Xplain</a> zeigt auf, dass 1️⃣ die Behörden sich selbst immer tiefer in Abhängigkeiten zu Xplain navigiert hatten, 2️⃣ für diesen Lock-In keine Exit-Szenarien existieren und 3️⃣ Due Diligence vernachlässigt wurde (wieso?).Übrigens: Ein IT-Sicherheitszertifikat wie <a href="https://waldvogel.family/tags/ISO27001" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ISO27001</a> oder <a href="https://waldvogel.family/tags/SoC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoC2</a> sagt nichts über die tatsächliche Sicherheit aus, nur dass man viel Text dazu geschrieben hat.1/2 <a href="https://waldvogel.family/tags/TooBigToFail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TooBigToFail</a> <a href="https://waldvogel.family/tags/LockIn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LockIn</a> <a href="https://waldvogel.family/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://www.republik.ch/2023/09/25/xplain-ein-beschaffungsskandal" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.republik.ch/2023/09/25/xplain-ein-beschaffungsskandal</a>

isecjobs.comHIRING: Senior Cybersecurity Analyst, GRC / Concord, MA 👉 <a href="https://infosec-jobs.com/J40475/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec-jobs.com/J40475/</a> <a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/infosecjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosecjobs</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/CyberCareer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCareer</a> <a href="https://mastodon.social/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/jobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobs</a> <a href="https://mastodon.social/tags/jobsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobsearch</a> <a href="https://mastodon.social/tags/techjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#techjobs</a> <a href="https://mastodon.social/tags/hiringnow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hiringnow</a> <a href="https://mastodon.social/tags/job" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#job</a> <a href="https://mastodon.social/tags/SeniorJobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SeniorJobs</a> <a href="https://mastodon.social/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a> <a href="https://mastodon.social/tags/GRCjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GRCjobs</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/PCIDSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PCIDSS</a> <a href="https://mastodon.social/tags/ConcordMA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ConcordMA</a> <a href="https://mastodon.social/tags/KAYAK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KAYAK</a> <a href="https://mastodon.social/tags/NIST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NIST</a> <a href="https://mastodon.social/tags/flexiblehours" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#flexiblehours</a>

Thomas Strömberg 🚲🌳🛵Today it's my turn to present at the company all-hands meeting, discussing the importance of the <a href="https://triangletoot.party/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> "certification".I hope the first slide captures my feelings appropriately.

Thomas Strömberg 🚲🌳🛵Our latest <a href="https://triangletoot.party/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> drop: <a href="https://github.com/chainguard-dev/acls-in-yaml" rel="nofollow noopener noreferrer" target="_blank">https://github.com/chainguard-dev/acls-in-yaml</a>As part of <a href="https://triangletoot.party/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://triangletoot.party/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a>, we've been using this to run monthly <a href="https://triangletoot.party/tags/audit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#audit</a> reviews of our ACLs across SaaS platforms: <a href="https://triangletoot.party/tags/GCP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GCP</a>, <a href="https://triangletoot.party/tags/Slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Slack</a>, <a href="https://triangletoot.party/tags/Vercel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vercel</a>, etc. acls-in-yaml dumps <a href="https://triangletoot.party/tags/ACLs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ACLs</a> from each platform into a consistent and neutral <a href="https://triangletoot.party/tags/YAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YAML</a> format, which makes it easy to visualize change over time. We use this by committing the result into a <a href="https://triangletoot.party/tags/Github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Github</a> repo and getting the PR reviewed by the admins for each system.PS: ACL change alerts are also awesome!

Recent searches

Search options

Administered by:

Server stats:

#soc2