Authorization in the Context of SOC 2 and Other Certifications

2 years ago thenewstack.io

Summary: This is a summary of an article originally published by The New Stack. Read the full original article here →

A cyberattack or a data breach can have a massive impact on an organization. If your business handles sensitive customer information, you want to take measures that will protect your customer’s data and, at the same time, prove that you value security as a top priority.

Although they aren’t legally required, they are beneficial for SaaS businesses, data centers and other entities that handle sensitive data.

Systems and Organization Controls 2 (SOC 2) is a voluntary data security compliance standard created by the American Institute of Certified Public Accountants (AICPA).

System and application access controls: You must make sure that only authorized users have system access according to the access control policy.

DevOps Articles