If you’re about to take on a SOC 2 engagement for the first time, you’ll quickly discover how flexible the compliance standard is. The framework is directional rather than prescriptive — in other words, it tells you what your destination is, but not how to get there. And as you’ll see, that can be a blessing and […]