The System and Organization Controls (SOC) 2 standard is in trouble.
Because I’m biased (I sell preparation for competing standards), I’ll just demonstrate this fact by what other people are saying about.
SOC 2 is dead
Why others suggest it's time to move on from what was the "gold standard" of B2B SaaS security due diligence.
As promised :) https://sensiblesecurity.xyz/p/soc-2-is-dead-long-live-soc-2