Playbook: Be Careful With Your SOC2 Controls

About this episode

Max Clark discusses the misconceptions surrounding SOC 2 certification and the pitfalls of tying security controls to specific vendor tools.

SOC 2 certification has become shorthand for security. It isn't. Max Clark breaks down what SOC 2 actually demonstrates — and the costly mistake most buyers make when building their controls: anchoring them to a specific vendor's tool. When you replace that tool, the control breaks. And you won't find out until your auditor does.

People in this episode

Guest: Max Clark

Topics covered

• SOC 2 certification
• security controls
• vendor tools
• auditing
• risk management

Keywords

• SOC 2
• security
• controls
• vendor
• auditor
• certification
• risk

Mentioned in this episode

Organizations: ITBroker.com

More episodes of Tech Deep Dive

• AI Agents Are Already Inside Your Company. Nobody’s Watching Them. · June 9, 2026 · 1h 19m
• You Bought the Stack. You're Using Half of It. · June 2, 2026 · 1h 33m
• Playbook: MSPs · May 26, 2026 · 9 min
• Nobody Owns Your Cloud Bill · May 19, 2026 · 2h 10m
• You’re Scaling on Infrastructure You Don’t Control · May 12, 2026 · 53 min
• You’re Paying for the Same Network Twice · May 5, 2026 · 2h 12m