Ask HN: How do you respond to questionaire by big corp on cloud practices

2 pointsjinen834y ago1 comments

Things like: 1) SDLC policy 2) incidence response plan 3)security policy document(s)

1 comments

1 comments · 1 top-level

orbz4y ago

First step is you actually _have_ those policies, if not create them. Following is you prove that you have them via something like a SOC2 audit.

j / k navigate · click thread line to collapse