SOC 2

A buyer’s guide to assumed breach penetration testing: how it works, how it differs from a standard test or red team, and how to tell if your organisation is ready …

SOC 2 never uses the words “penetration test” but most auditors expect one anyway. Here is what CC4.1 actually requires, how often to test, and what a Type II audit …