Doug Barbin · Security & GRC Decoded · Your Auditor Is Testing the Wrong Thing | Schellman's Doug Barbin on Process Audits, SOC 2, & AI Agents
Audio streams from the publisher’s own feed. Verbatim does not host or copy it.
focus audits on the SDLC process and automation rather than sampling a small set of code changes
“If you can break the process into sub-processes, diagram them, study them, improvement, improve them. It's much easier to change a hundred things by one percent than to change one thing by a hundred percent.”
“Within nine months, Lambda has to complete an audit of their Export Controls Compliance Program utilizing the exact BIS sample audit module... they have to prove IP blocking, geofencing, and verification of access information.”
“Whenever a change takes place … you can set up those triggers … you are the one to know that in real time instead of waiting for your audit”
“I’d rather have a prospective client try to negotiate… I’ll ask what range they’re looking to be in… maybe we can change a couple of things… I’d rather have the job than not”
The strongest new moments on your topics, in the speakers' own words. Free for three topics.
No card. No password. One-click unsubscribe.
Pro watches up to 25 names or phrases and emails you the morning after they are said.
See Pro, $29 a monthVerbatim quotes a short extract and links to the episode; the episode belongs to its publisher. Remove a show.