The Dark Side of SOC 2: Third-Party Risks Hiding in Plain Sight

This conference talk from RSA Conference explores the hidden vulnerabilities in SOC 2 reports that many organizations miss when managing third-party risks. Join Trevor Horwitz, CISO & Founder of TrustNet, and Mike Kerem, CTO of TrustNet, as they reveal how vendors can technically comply with SOC 2 standards while still leaving clients exposed to significant risks. Learn to critically evaluate vendor SOC 2 reports beyond their surface-level assurances, identify subtle blind spots in compliance documentation, and elevate your expertise in third-party risk assessment. Discover practical approaches to uncover the less-obvious risks that hide within seemingly compliant vendor relationships during this 50-minute session.