SOC 2, Vibes, and the Audit Arms Race

This episode dives deep into the messy, absurd, and sometimes hilarious world of SOC 2 audits and compliance frameworks. Wiz CISO Expert Zlatko Unger joins the crew to talk about the expanding “acronym soup” of frameworks, the blurred lines between automation and assurance, and why finding an auditor who vibes with your team might matter more than the name on the certificate.The crew also debates the future of SOC 2 — from fast-track “15-hour audits” to the rise of AI-generated reports — and whether the entire model needs a ground-up rebuild.Guest: Zlatko Unger, CISO Expert at WizHosts: Troy Fine, Kendra Cooley, Elliot Volkman00:03 — Framework overload00:07 — Auditor “vibe check”00:11 — SOC 2’s fall from grace00:16 — TPRM and audit fatigue00:25 — SOC 2 for robots00:36 — Reform or rebuild? Hosted on Acast. See acast.com/privacy for more information.