Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.
| Episode | Date |
|---|---|
|
Welcome to the SOC 2 Audio Course
|
Oct 14, 2025 |
|
Episode 64 — Pre-Sales Enablement: Using SOC 2 to Accelerate Deals
|
Oct 14, 2025 |
|
Episode 63 — Pentest Scoping, Findings Lifecycle, Remediation Proof
|
Oct 14, 2025 |
|
Episode 62 — IaC Guardrails & Policy-as-Code (OPA, conftest, SCPs)
|
Oct 14, 2025 |
|
Episode 61 — Mobile App SDLC & App-Store Release Governance
|
Oct 14, 2025 |
|
Episode 60 — Multi-Cloud Specifics: AWS/Azure/GCP Control Patterns
|
Oct 14, 2025 |
|
Episode 59 — Evidence Retention, Chain-of-Custody, Immutability
|
Oct 14, 2025 |
|
Episode 58 — Customer Trust Portals & Controlled Evidence Sharing
|
Oct 14, 2025 |
|
Episode 57 — GenAI/ML Services in Scope: Risks, Controls, Evidence
|
Oct 14, 2025 |
|
Episode 56 — Designing a Metrics & KRIs Program for SOC 2
|
Oct 14, 2025 |
|
Episode 55 — SRE for Availability: SLOs, Error Budgets, Incident Math
|
Oct 14, 2025 |
|
Episode 54 — Backup, Restore, and DR Testing at Scale
|
Oct 14, 2025 |
|
Episode 53 — Remote Work Security: Home Offices, Travel, Contractors
|
Oct 14, 2025 |
|
Episode 52 — Endpoint & MDM Controls for Distributed Teams
|
Oct 14, 2025 |
|
Episode 51 — Secrets Management in Code and Pipelines (Deep Dive)
|
Oct 14, 2025 |
|
Episode 50 — Key Management & BYOK/KMS Rotations
|
Oct 14, 2025 |
|
Episode 49 — Data Residency & Sovereignty in SOC 2 Scopes
|
Oct 14, 2025 |
|
Episode 48 — Beyond the Stamp: Turning SOC 2 into Real Outcomes
|
Oct 14, 2025 |
|
Episode 47 — Annual Maintenance: Calendars, KRIs, Maturity
|
Oct 14, 2025 |
|
Episode 46 — Startup vs Enterprise Right-Sizing
|
Oct 14, 2025 |
|
Episode 45 — Pairing with Pen Tests, Bug Bounties, SSDF/SLSA
|
Oct 14, 2025 |
|
Episode 44 — Using SOC 2 to Answer SIG/CAIQ/Customer Questionnaires
|
Oct 14, 2025 |
|
Episode 43 — Crosswalks: SOC 2 ↔ NIST CSF / ISO 27001 / CIS 18
|
Oct 14, 2025 |
|
Episode 42 — Final Report Reviews & Distribution Practices
|
Oct 14, 2025 |
|
Episode 41 — Handling Exceptions & Deviations
|
Oct 14, 2025 |
|
Episode 40 — Fieldwork Do’s & Don’ts; Request Lists & Walkthroughs
|
Oct 14, 2025 |
|
Episode 39 — Readiness Assessments & Gap Closure
|
Oct 14, 2025 |
|
Episode 38 — Selecting the CPA Firm & Independence
|
Oct 14, 2025 |
|
Episode 37 — Policy-to-Practice Traceability (Text → Proof → Tests)
|
Oct 14, 2025 |
|
Episode 36 — CI/CD & Cloud Proofs: Pipelines, Baselines, Diffs
|
Oct 14, 2025 |
|
Episode 35 — Audit-Ready Logs & Screenshots: Accept vs Reject
|
Oct 14, 2025 |
|
Episode 34 — Ticketing as Evidence (Approvals, Change, Incidents)
|
Oct 14, 2025 |
|
Episode 33 — Continuous Control Monitoring & Automation
|
Oct 14, 2025 |
|
Episode 32 — Evidence Strategy & Sampling for Type II
|
Oct 14, 2025 |
|
Episode 31 — Strong Control Narratives: Before/After Examples
|
Oct 14, 2025 |
|
Episode 30 — Cloud & Multitenant Edge Cases (Scope, Tenancy, Regions)
|
Oct 14, 2025 |
|
Episode 29 — Evidence for A/C/PI/P: What “Good” Looks Like
|
Oct 14, 2025 |
|
Episode 28 — Privacy in Context: SOC 2 vs ISO 27701 vs HIPAA
|
Oct 14, 2025 |
|
Episode 27 — Privacy: Notice, Rights, DPIAs, Retention, DSRs
|
Oct 14, 2025 |
|
Episode 26 — Processing Integrity: Accuracy/Completeness/Monitoring
|
Oct 13, 2025 |
|
Episode 25 — Confidentiality: Classification, Encryption, DLP
|
Oct 13, 2025 |
|
Episode 24 — Availability: Capacity, DR, RTO/RPO, Game-Days
|
Oct 13, 2025 |
|
Episode 23 — CC12 Physical/Environmental & Remote-First Realities
|
Oct 13, 2025 |
|
Episode 22 — CC11 Vendor Risk & Subservice Oversight
|
Oct 13, 2025 |
|
Episode 21 — CC10 Data Integrity in Pipelines
|
Oct 13, 2025 |
|
Episode 20 — CC9 Incident Management & Communications
|
Oct 13, 2025 |
|
Episode 19 — CC8 Change Management & SDLC (incl. IaC Basics)
|
Oct 13, 2025 |
|
Episode 18 — CC7 Ops: Config Management, Vulnerability Mgmt, Patching
|
Oct 13, 2025 |
|
Episode 17 — CC6 Logical Access: IAM, SSO, MFA, JML
|
Oct 13, 2025 |
|
Episode 16 — CC5 Control Design, Reviews, and Monitoring
|
Oct 13, 2025 |
|
Episode 15 — CC4 Commitments, SLAs, Regulatory Requirements
|
Oct 13, 2025 |
|
Episode 14 — CC3 HR Lifecycle: Hiring, Training, Offboarding
|
Oct 13, 2025 |
|
Episode 13 — CC2 Risk Assessment (Method & Cadence)
|
Oct 13, 2025 |
|
Episode 12 — CC1 Governance & Tone at the Top
|
Oct 13, 2025 |
|
Episode 11 — How to Read a SOC 2 Report
|
Oct 13, 2025 |
|
Episode 10 — CUECs Done Right
|
Oct 13, 2025 |
|
Episode 9 — Subservice Orgs: Inclusive vs Carve-Out
|
Oct 13, 2025 |
|
Episode 8 — Writing the System Description
|
Oct 13, 2025 |
|
Episode 7 — Type I vs Type II (and Bridge Letters)
|
Oct 13, 2025 |
|
Episode 6 — Program Roadmap & Realistic Timelines
|
Oct 13, 2025 |
|
Episode 5 — Control Ownership & RACI Across the Org
|
Oct 13, 2025 |
|
Episode 4 — Trust Services Criteria at a Glance
|
Oct 13, 2025 |
|
Episode 3 — Scoping: System Boundary, Services, Regions, Tenants
|
Oct 13, 2025 |
|
Episode 2 — Do You Need SOC 2 Now? Buyer & Contract Signals
|
Oct 13, 2025 |
|
Episode 1 — What SOC 2 Is (and Isn’t)
|
Oct 13, 2025 |