Posts on product security

No UK law requires SOC 2. You need it when US customers write it into contracts. Here is what SOC 2 involves, Type 1 vs Type 2, and when ISO 27001 will do.

Product security (ProdSec) protects a product across its whole lifecycle, design, build, supply chain and support. A practical UK guide.