Understanding the Cyber Security Acronym Soup
summary
Compares concrete outcomes: SOC 2 type 1 in 7–10 days (design review) versus type 2 testing controls over 3–12 months, annual SOC 2 attestations and a scrubbed SOC 3 public report; ISO 27001 has 114 controls with certification lasting three years and surveillance audits in years one and two. Describes audit automation tools that feed auditors, typical costs ($10k–$100k+), common scoping tricks that exclude HR or regions, and the fact organisations can be compliant without being certified.
AI-written summary · about
chapters (8)
- 0:00Introduction and background
- 1:12Overview of security standards
- 6:42Value and drivers of compliance
- 12:24Deep dive into SOC 2
- 21:06Understanding ISO 27001
- 29:24Trust and audit credibility
- 35:43Risks of audit manipulation
- 40:50Getting value from compliance
related talks
30mStartups: SOC 2 ... Now or Later?
17mWould your business pass pre-flight information security checks?
42mCISO Panel
40mCybersecurity Controls: It Isn't Just Technical Controls That Need Testing
32mConfidence in Chaos: Strategies for World-Class Security Operations
40mCybersecurity Operations Center Technology Taxonomy
54mSOCcing: Responding to a Cyber Incident
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage