21

SOC 2 Type 2 does not have specific technical requirements. What you have to do is to satisfy your assessor. And if your company cannot satisfy your assessor, then there is a mechanism called "management response" where the company gets to explain away the findings from the assessor. And if your assessor is 4 years behind in their understanding of best ...


4

Asymmetric encryption was only introduced to AWS KMS in 2019. Prior to that, only symmetric encryption was available regardless of which region you were using. Even when AWS made the official announcement for asymmetric keys on KMS, many regions did not get the functionality on day 1. Also, the two regions in China are somewhat special, in that they're ...


3

First of all, don't trust any legal advice from a Q&A site on the internet. I am not a lawyer, but I can give you some pointers at least: It mostly depends on your place of jurisdiction. Laws are quite diverse in regards to liability when it comes to cyber security. You should consult with a legal expert familiar with software liability in your place of ...


Only top voted, non community-wiki answers of a minimum length are eligible