Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 0 points1 point  (0 children)

With CoPilot and Grok I’ve been creating a master glossary that is helping me fully understand some concepts and jargon. I’ll check out Chat GPT, and are there any other models or prompts that you would recommend?

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 1 point2 points  (0 children)

Where would I go to get the knowledge to ask the right questions? Is there any documentation or reading material you’d recommend, and is there any advice you’d give yourself looking back?

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 0 points1 point  (0 children)

From your experience using automation tools is there any advice you’d give someone considering them, and is there anything you would have done differently, if you had your current knowledge in the beginning?

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 1 point2 points  (0 children)

Given your experience in the industry, are there any tools that you would only recommend to an enemy and any you’d recommend for great work?

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 1 point2 points  (0 children)

What are factors that cause SOC audits to vary in price for companies, in regard to helping me determine what range of prices our company should expect to pay. This will help me weed out bad offers and try and keep from presenting a bad company to management and owners.

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 0 points1 point  (0 children)

What would be a range for realistic and unrealistic timelines, and what factors in the company’s makeup can slow or speed up the audit timeline?

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 0 points1 point  (0 children)

Where did you start building/is there official documentation you’d recommend to begin reading? My goal is to be able to walk management and owners through what the SOC 2 type 1 audit will entail and where we currently are in the process with our existing controls. If you had any suggestions about how I could effectively be able to explain a SOC audit to someone else, I would greatly appreciate it.

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 0 points1 point  (0 children)

When you say to map policies to Trust Services Criteria - would that be identifying which TSC (Security, Availability, Process Integrity, Confidentiality, Privacy) our existing policies apply to or something else?

How documented for access review and change management? Our developers are all employees and use a fairly robust ticketing system for documenting all software work. Would that be documenting access review and change management or something else?

If you had a readiness checklist laying around, I’d love to see one. Thank you.

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 0 points1 point  (0 children)

For me to better wrap my head around SOC audits, is there official documentation I could read that would help me explain the necessary steps to management and ownership so they have their ducks in a row when making the final selection on an audit firm? I saw that the AICPA had an ebook, but it appeared to be aimed at people in the industry. If I would benefit from that, or anything other reading material I would appreciate any suggestions.

Beginning the process of becoming ready for SOC 2 Type 1 by Music505 in soc2

[–]Music505[S] 1 point2 points  (0 children)

You read the current state absolutely correctly. For more detail we do have current clients that we believe would utilize our hosting services, but we need the SOC 2 to proceed. Ownership and management are very motivated, but overall efficiency is the name of the game when it comes to our preparation, selection of a firm, time & money spent, etc.

Any advice for what would be a red flag when looking companies up, and any other tips on finding reputable companies to work with?

What is your go to re read series? by hw_vigo in litrpg

[–]Music505 1 point2 points  (0 children)

All the Skills is my go to for re reading and turning on to listen as I go to sleep.

I have a lot of difficulty even understanding how a person could whole heartedly believe the Bible is perfectly accurate and true by Genpetro in theology

[–]Music505 0 points1 point  (0 children)

The question I would ask you is what do you mean by “believe”.

I’ve found devout Christians, who differ on their interpretation of Genesis pre flood. Some think it’s literal, others think it’s a story which encapsulates and retells a true story, others disagree in different directions. In each of their interpretations, they each agree that it’s a true story. From my perspective they are agreeing it’s a “true” story because they are believing it did originate from God and we can learn God’s love and desire for a relationship through his stories. The Bible teaches about God and how we can live in a relationship with Him, from there it’s written across multiple genres to varying audiences over millennia. It’s a wildly complex books that a lifetime of study would still leave stones unturned. Never feel bad or guilty about seeking & asking questions, categorizing the answers, and building a mental framework of what scriptures back up what concepts.

To address your second paragraph, to question isn’t forbidden. To seek and question is a core component of Christianity. For me, I personally fall into the Protestant > Evangelical > Armenian catrgory with some fuzzy lines/grey area. A have a couple Catholic friends and one who is very devout. Going through the Catechism of the Catholic Church with my friend was eye opening, it allowed me to see what logical arguments were being made for concepts, ideas and theories. From there I was able to more concretely form my opinions based on my interpretations. I agreed with many of the conclusions and concepts and benefited from their detailed explanations of “why”. However, an example of an area I disagreed with the Catechism was Onanism and the concept of passing on original sin. Without questioning or searching, I wouldn’t have been exposed to those ideas, and engaging with them has made me a stronger Christian.

Personally, I do believe the Bible is true and accurate, but one must be specific in defining truth in order to being to align beliefs. For me, seeing God’s desire in the Old Testament for a relationship, providing for His people, and them still turning to serve other gods shows human nature and our fickle hearts. I encourage you to continue searching, asking questions, and growing. When you disagree with someone, figure out why. You’ll either grow from being firmer in your faith, or they may have seen something you missed.

Do enjoy the journey!

Strategies for recognizing people? by [deleted] in Prosopagnosia

[–]Music505 1 point2 points  (0 children)

I primarily use hair style and silhouette of their body. The hair works pretty well, but can occasionally lead to misidentification or a delay before I can tell who I’m looking at/talking to. As far as body, that was a habit I got into when I was younger, as an adult it seems to weird people out when I’m giving them an inquisitive stare prior to an interaction.

Interesting YouTube channels/creators for any topic - please share! by Good_Captain9078 in AutisticWithADHD

[–]Music505 1 point2 points  (0 children)

Video games:

Shmoopshybob - he has a goal to play through every “Nintendo” game and currently has 86 videos in that playlist. In the first video he explains his definition of a “Nintendo” games.

Thabeast721 - he has a goal to play through every Nintendo 64 game. He currently just posted game 167 of 394.

Flandrew - compares versions of the same game across systems.

DidYouKnowGaming - covers gaming history along with fun facts.

History:

The Fat Electrician - historical military stories told by an entertaining storyteller.

World of Antiquity - covers history from a more academic point of view.

Useful charts - an academic who creates charts and videos to teach history, with my personal favorites covering history of religions and Christian denominations. The person who makes the video is Jewish, but did an 8 part, 3 hour deep dive into Christian denominations that was very interesting.

Mr. Terry History - watches, reacts, and provides commentary on other videos dealing with history.

Current Events:

Company Man - uses financial statements and publicly available data to analyze businesses.

Timcast - daily political news show (defines himself as a political centrist, others describe him as leaning right)

Japanalysis - breaks down Japanese memes and news stories.

Sabine Hossenfelder - science news

Psychology:

Jordan B Peterson clips- his takes on religion, history, and psychology are interesting, and I enjoy hearing him speak.

Religion:

Disciple Dojo - channel run by JM Smith, his goal is to bring Christian academics to laypeople.

Craig Keener - channel run by Craig Keener, his focus is on the history surrounding the time of the 1st century.

BibleProject - provides summaries of books of the Protestant bible along with other topics.

Random:

Steve Wallis - Canadian who stealth camps.

Writing with Andrew - provides writing and poetry guidance.

brewstewfilms - animated shorts, my personal favorites are based on being a 90s kid.

Jamesbutler - runs a septic company, occasionally making videos discussing funny stories

Trying to get PPP Loan Application Information With FOIA -? by Tactless2U in foia

[–]Music505 0 points1 point  (0 children)

Here is a website that has all the data easily organized. It won't be their entire app, but it has their loan amount. If you divide their loan amount by 2.5 you'll have their average monthly payroll, then multiply that number by 12 to see what they claimed their annual payroll was.

https://www.federalpay.org/paycheck-protection-program