SOC 2, Vibes, and the Audit Arms Race
Description
This episode dives deep into the messy, absurd, and sometimes hilarious world of SOC 2 audits and compliance frameworks. Wiz CISO Expert Zlatko Unger joins the crew to talk about the expanding “acronym soup” of frameworks, the blurred lines between automation and assurance, and why finding an auditor who vibes with your team might matter more than the name on the certificate.
The crew also debates the future of SOC 2 — from fast-track “15-hour audits” to the rise of AI-generated reports — and whether the entire model needs a ground-up rebuild.
Guest: Zlatko Unger, CISO Expert at Wiz
Hosts: Troy Fine, Kendra Cooley, Elliot Volkman
00:03 — Framework overload
00:07 — Auditor “vibe check”
00:11 — SOC 2’s fall from grace
00:16 — TPRM and audit fatigue
00:25 — SOC 2 for robots
00:36 — Reform or rebuild?
Hosted on Acast. See acast.com/privacy for more information.











