On: Private equity groups that buy companies they own

[blowski]

I thought SOX was mostly financial. What you’re saying here sounds more like SOC. are they connected?

[pm90 → blowski]

You can think of SOX as RFC and SOC2 as an implementation of it.

https://www.logicgate.com/blog/a-comparison-of-soc-and-sox-c...

[solar-ice → pm90]

SOC 2 is the bit that changes how software development is done, and has literally nothing to do with SOX, even according to that article.

[collegeburner → pm90]

There is literally 0 requirement to implement SOC2 for SOX. They are not related at all aside from that a lot of organizations do both. I'm kinda curious now where you got this idea?