social.coop

0 posts0 participants0 posts today

Tuist5. What’s next?We’ve launched the Tuist Security Center <a href="https://security.tuist.dev/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://security.tuist.dev/</a> where you can: 🔹 See how we protect your data 🔹 Request our SOC 2 reportSecurity is a journey. We’re just getting started. 🚀🔒 <a href="https://fosstodon.org/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://fosstodon.org/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://fosstodon.org/tags/DevTools" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevTools</a> <a href="https://fosstodon.org/tags/SaaS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SaaS</a>

Dr. HermanSJr.Industry's 1st & only book/#bible on <a href="https://mastodon.social/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a>/#governance for <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> for all <a href="https://mastodon.social/tags/enterprise" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#enterprise</a> & <a href="https://mastodon.social/tags/startups" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#startups</a> <a href="https://mastodon.social/tags/serviceProviders" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#serviceProviders</a> worldwide regarding <a href="https://mastodon.social/tags/IT" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IT</a>, <a href="https://mastodon.social/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>, <a href="https://mastodon.social/tags/InformationTechnology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InformationTechnology</a>."The Framework Efficiency Architect: Transforming SOC 2 Into A Monetization Weapon"More info at DrHermanSJr.carrd.co (last book at bottom).Launching late April 2025 as the first in a series covering major frameworks.Pre-sales, with an added free 1-hour consultation, available now at <a href="https://ko-fi.com/s/0727fa33a1" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://ko-fi.com/s/0727fa33a1</a>.

passboltOver the last four months, passbolt underwent three independent assessments to evaluate and strengthen our security posture.These assessments help us identify and address areas for improvement while confirming our existing security strengths. Read more about the latest security reviews: <a href="https://hubs.li/Q039csDh0" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hubs.li/Q039csDh0</a>See the findings in the thread.<a href="https://mastodon.social/tags/SecurityAudit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SecurityAudit</a> <a href="https://mastodon.social/tags/Cryptography" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cryptography</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mastodon.social/tags/PasswordSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordSecurity</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/Pentesting" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Pentesting</a>

Frederic Branczyk :verified:Compliance is one of those things that all businesses have to go through, so it's not all that special, but I'm really excited about what this is about to unlock for Polar Signals! <a href="https://hachyderm.io/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://hachyderm.io/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> <a href="https://hachyderm.io/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a><a href="https://www.polarsignals.com/blog/posts/2025/01/14/soc2type2" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.polarsignals.com/blog/posts/2025/01/14/soc2type2</a>

AGR Risk Intelligence> Compliance is a byproduct of security engineering. Good security engineering has little to do with compliance. **The SOC2 Starting Seven** <a href="https://www.latacora.com/blog/2020/03/12/the-soc-starting/" rel="nofollow noopener noreferrer" target="_blank">https://www.latacora.com/blog/2020/03/12/the-soc-starting/</a> <a class="hashtag" href="https://pleroma.envs.net/tag/cybersecurity" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a class="hashtag" href="https://pleroma.envs.net/tag/soc2" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a class="hashtag" href="https://pleroma.envs.net/tag/compliance" rel="nofollow noopener noreferrer" target="_blank">#Compliance</a>

Mr. Crab - Sysadmin from HeckOnce again fighting with the <a href="https://infosec.exchange/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> auditors because they don't understand EDR/XDR vs basic AV.The auditors make vague requests and then disappear for a few days before replying with even murkier responses.They reject reports even though some systems only have the option of outputting to a .csv files, even with screenshots of the parameters included.How do I show that a spreadsheet has been only shared on a need to know basis??Not sure if this level of tedium is the norm for a soc2 type II engagement but this has been the most frustrating thing I've worked on all year.

NosirrahSec 🏴‍☠️Need some help making sure what I'm writing for SOC2 compliance isn't pure shit, and since searching for anything SOC2 related just results in sales bullshit...Was hoping the community had resources saved from their own pains doing this.Anyone got resources related to writing up compliant policies for SOC2 compliance? I'm shooting out of my depth I feel going from engineering/infosec/operations to writing policies, but if I don't who will? lol<a href="https://infosec.exchange/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://infosec.exchange/tags/grc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#grc</a>

passbolt🚀 <a href="https://mastodon.social/tags/Passbolt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Passbolt</a> has successfully renewed its SOC2 Type II audited report, with no exception noted by the auditors, for the third time in a row! Contact us to review the report: <a href="https://hubs.li/Q02sxvf00" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://hubs.li/Q02sxvf00</a><a href="https://mastodon.social/tags/Security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Security</a> <a href="https://mastodon.social/tags/Compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Compliance</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>

Thijs KromhoutFairly simple question regarding <a href="https://infosec.exchange/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> reporting:Is it possible for an organization to decide not to do a type 1 assurance report and straight go for a type 2?Or should one always do type 1 and then type 2?

Marcel WaldvogelDer <a href="https://waldvogel.family/tags/Republik" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Republik</a>-Artikel von <a href="https://chaos.social/@adfichter" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@adfichter</a> zu <a href="https://waldvogel.family/tags/Xplain" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Xplain</a> zeigt auf, dass 1️⃣ die Behörden sich selbst immer tiefer in Abhängigkeiten zu Xplain navigiert hatten, 2️⃣ für diesen Lock-In keine Exit-Szenarien existieren und 3️⃣ Due Diligence vernachlässigt wurde (wieso?).Übrigens: Ein IT-Sicherheitszertifikat wie <a href="https://waldvogel.family/tags/ISO27001" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ISO27001</a> oder <a href="https://waldvogel.family/tags/SoC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SoC2</a> sagt nichts über die tatsächliche Sicherheit aus, nur dass man viel Text dazu geschrieben hat.1/2 <a href="https://waldvogel.family/tags/TooBigToFail" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TooBigToFail</a> <a href="https://waldvogel.family/tags/LockIn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LockIn</a> <a href="https://waldvogel.family/tags/FOSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FOSS</a> <a href="https://www.republik.ch/2023/09/25/xplain-ein-beschaffungsskandal" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.republik.ch/2023/09/25/xplain-ein-beschaffungsskandal</a>

isecjobs.comHIRING: Senior Cybersecurity Analyst, GRC / Concord, MA 👉 <a href="https://infosec-jobs.com/J40475/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://infosec-jobs.com/J40475/</a> <a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/infosecjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosecjobs</a> <a href="https://mastodon.social/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://mastodon.social/tags/CyberCareer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCareer</a> <a href="https://mastodon.social/tags/cyber" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cyber</a> <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://mastodon.social/tags/jobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobs</a> <a href="https://mastodon.social/tags/jobsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobsearch</a> <a href="https://mastodon.social/tags/techjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#techjobs</a> <a href="https://mastodon.social/tags/hiringnow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hiringnow</a> <a href="https://mastodon.social/tags/job" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#job</a> <a href="https://mastodon.social/tags/SeniorJobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SeniorJobs</a> <a href="https://mastodon.social/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a> <a href="https://mastodon.social/tags/GRCjobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GRCjobs</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://mastodon.social/tags/PCIDSS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PCIDSS</a> <a href="https://mastodon.social/tags/ConcordMA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ConcordMA</a> <a href="https://mastodon.social/tags/KAYAK" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#KAYAK</a> <a href="https://mastodon.social/tags/NIST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NIST</a> <a href="https://mastodon.social/tags/flexiblehours" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#flexiblehours</a>

Ivan MoscosoRemembering the time I worked with a vendor on a <a href="https://indieweb.social/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> audit and how one of the people assigned to the job was so amazing at what they did.Reminder that no matter how much you feel what’s tedious for you must feel tedious to everyone, someone out there is incredibly passionate about that thing you aren’t thrilled to do on your own.

Thomas Strömberg 🚲🌳🛵<a href="https://hachyderm.io/@renice" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@renice</a> well said. <a href="https://triangletoot.party/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> my favorite sort of Ponzi scheme: one with a purpose.

Thomas Strömberg 🚲🌳🛵Today it's my turn to present at the company all-hands meeting, discussing the importance of the <a href="https://triangletoot.party/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> "certification".I hope the first slide captures my feelings appropriately.

Phillip UptonEncrypting your database at rest.For those times when you expect your adversary to be smart enough to infiltrate your system, but dumb enough to not decrypt it while they are in there. <a href="https://mastodon.sdf.org/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a>See also: <a href="https://stackoverflow.com/questions/58901688/how-to-confirm-data-at-rest-encrypted-by-mariadb" rel="nofollow noopener noreferrer" target="_blank">https://stackoverflow.com/questions/58901688/how-to-confirm-data-at-rest-encrypted-by-mariadb</a>

isecjobs.comHIRING: Senior Manager, Security Risk and Compliance / Campbell, CA <a href="https://infosec-jobs.com/J28282/" rel="nofollow noopener noreferrer" target="_blank">https://infosec-jobs.com/J28282/</a> <a href="https://mastodon.social/tags/InfoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSec</a> <a href="https://mastodon.social/tags/InfoSecJobs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#InfoSecJobs</a> <a href="https://mastodon.social/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://mastodon.social/tags/jobsearch" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#jobsearch</a> <a href="https://mastodon.social/tags/hiringnow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#hiringnow</a> <a href="https://mastodon.social/tags/CyberCareers" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberCareers</a> <a href="https://mastodon.social/tags/Campbell" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Campbell</a> <a href="https://mastodon.social/tags/CA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CA</a> <a href="https://mastodon.social/tags/Audits" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Audits</a> <a href="https://mastodon.social/tags/Cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloud</a> <a href="https://mastodon.social/tags/Compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Compliance</a> <a href="https://mastodon.social/tags/FedRAMP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FedRAMP</a> <a href="https://mastodon.social/tags/Finance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Finance</a> <a href="https://mastodon.social/tags/Governance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Governance</a> <a href="https://mastodon.social/tags/Monitoring" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Monitoring</a> <a href="https://mastodon.social/tags/NIST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NIST</a> <a href="https://mastodon.social/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> <a href="https://mastodon.social/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a>

Thomas Strömberg 🚲🌳🛵Damnit. I just tried to move my work machine to a Mac Mini running <a href="https://triangletoot.party/tags/AsahiLinux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AsahiLinux</a> - only to remember that Full Disk Encryption is not yet supported (<a href="https://github.com/AsahiLinux/asahi-installer/issues/137" rel="nofollow noopener noreferrer" target="_blank">https://github.com/AsahiLinux/asahi-installer/issues/137</a>), and it's required for logging in to our work systems (thanks, <a href="https://triangletoot.party/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a>!)Perhaps it's time to drag the <a href="https://triangletoot.party/tags/Honeycomb" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Honeycomb</a> <a href="https://triangletoot.party/tags/LX2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LX2</a> out. It's a really great kit for <a href="https://triangletoot.party/tags/arm64" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#arm64</a> <a href="https://triangletoot.party/tags/Linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Linux</a> - once you can get the fans under control.

mkbToday I got to spend an hour walking a more junior <a href="https://mastodon.social/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> person through some challenging problems in her first <a href="https://mastodon.social/tags/soc2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#soc2</a> audit. So much fun! I love watching people spread their wings.

Thomas Strömberg 🚲🌳🛵Our latest <a href="https://triangletoot.party/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#opensource</a> drop: <a href="https://github.com/chainguard-dev/acls-in-yaml" rel="nofollow noopener noreferrer" target="_blank">https://github.com/chainguard-dev/acls-in-yaml</a>As part of <a href="https://triangletoot.party/tags/SOC2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOC2</a> <a href="https://triangletoot.party/tags/compliance" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#compliance</a>, we've been using this to run monthly <a href="https://triangletoot.party/tags/audit" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#audit</a> reviews of our ACLs across SaaS platforms: <a href="https://triangletoot.party/tags/GCP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GCP</a>, <a href="https://triangletoot.party/tags/Slack" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Slack</a>, <a href="https://triangletoot.party/tags/Vercel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Vercel</a>, etc. acls-in-yaml dumps <a href="https://triangletoot.party/tags/ACLs" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ACLs</a> from each platform into a consistent and neutral <a href="https://triangletoot.party/tags/YAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#YAML</a> format, which makes it easy to visualize change over time. We use this by committing the result into a <a href="https://triangletoot.party/tags/Github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Github</a> repo and getting the PR reviewed by the admins for each system.PS: ACL change alerts are also awesome!

Recent searches

Search options

Administered by:

Server stats:

#soc2