SOC2: The screenshots will continue until security improves
I work somewhere going through a similar process for much the same reason.<p>And to be frank, I&#x27;m wondering if how it ends is in me looking for a new job.<p>I know there&#x27;s good reasons for the business to go through this process, and maybe it is really important for the business future but as an individual it sucks, my main motivator of achieving good outcomes for users, has been derailed by a large amount of procedure instigated under the belief that some auditor I&#x27;ve never met will be impressed.<p>Now with all this new procedure piled on, all of which is very new and thus immature and untried, I feel my energy to innovate, build new things and just generally drive change sapping away.<p>So the cost of your company isn&#x27;t just the direct hours and the auditors fees! There&#x27;s also a harder to quantify cost, as everything and everyone bends to change every team to work in the way some external entity thinks it should. This loss of autonomy and the loss of spirit is I think potentially far far more expensive than the direct costs.<p>Of course, maybe we&#x27;re just going about the whole process poorly. I like to think if you were to do it well maybe it&#x27;s not so bad. But, to do that I think you&#x27;d need abnormally talented staff involved, who are well versed in the topic, enthusiastic and empathetic. Most people involved in these sorts of processes in my experience aren&#x27;t like that, and I can&#x27;t say I blame them.