yylyyl

6 ms·

1. 1.▲
   by yylyyl 1mo ago

   Perfect
2. 2.▲
   by yylyyl 1mo ago

   Appreciate it! Happy to answer any questions.
3. 3.▲
   by yylyyl 1mo ago

   SOC 2 is almost a must-have for startups if they want to pursue enterprise deals. Not all soc 2 audits worth the same. People usually trust 2 types of audits: 1. a reputable name or 2. a transparent report that can show all the details lik
4. 4.▲
   by yylyyl 1mo ago

   Your AI can read the open source methodology to get audit ready for you without relying on a compliance platform. The actual audit is done by a licensed firm.
5. 5.▲
   by yylyyl 1mo ago

   The method is mine. How I test, what evidence I accept, how I call a deviation. Every firm has their own methodology but none of them publish it.
6. 6.▲
   by yylyyl 1mo ago

   I'm the author. CPA, spent 5 years doing SOC 2 fieldwork at Deloitte, recently started my own audit firm. This repo is the methodology we actually audit against, not a summary of it: 86 controls, 355 test attributes with pass criteria,
7. 7.▲
   Show HN: Ex-Deloitte auditor open-sourced the whole SOC 2 method for your AI(github.com)

   36 points by yylyyl 1mo ago|14 comments