This episode dives deep into the messy, absurd, and sometimes hilarious world of SOC 2 audits and compliance frameworks. Wiz CISO Expert Zlatko Unger joins the crew to talk about the expanding “acronym soup” of frameworks, the blurred lines between automation and assurance, and why finding an auditor who vibes with your team might matter more than the name on the certificate.

The crew also debates the future of SOC 2 — from fast-track “15-hour audits” to the rise of AI-generated reports — and whether the entire model needs a ground-up rebuild.

Guest: Zlatko Unger, CISO at Wiz

Hosts: Troy Fine, Kendra Cooley, Elliot Volkman

00:03 — Framework overload

00:07 — Auditor “vibe check”

00:11 — SOC 2’s fall from grace

00:16 — TPRM and audit fatigue

00:25 — SOC 2 for robots

00:36 — Reform or rebuild?

Hosted on Acast. See acast.com/privacy for more information.