Transcript
If you ever work with vendors or run a business that handles customer data, chances are that you heard someone mention sock one and sock 2 audits. Okay, so let's start off talking about sock one. This one's all about financial data. If your services impact your client's books like payroll, billing, invoicing, or anything that ends up in financial reports, then sock one is what matters to them. It answers this question. Can your system be trusted not to mess up our financials? So, it's mostly for your clients, auditors, and finance teams. Now, sock 2 is the one that most SAS companies care about. This one's all about how you protect your user data. Things like, is your app secure? Do you have backups? Are you encrypting things? Can you keep private information actually private? There are five categories they can cover. Security, which is required, plus availability, processing and integrity, confidentiality, and privacy. But most just start with security and availability.