https://soc2.baremetalcyber.com/ 2026-03-17T01:17:04Z 1.0 https://soc2.baremetalcyber.com/episodes 2026-03-17T01:17:04Z 0.8 https://soc2.baremetalcyber.com/contact-us 2026-03-17T01:17:04Z 0.8 https://soc2.baremetalcyber.com/baremetalcyber 2026-03-17T01:17:04Z 0.8 https://soc2.baremetalcyber.com/recommended 2026-03-17T01:17:04Z 0.8 https://soc2.baremetalcyber.com/subscribe 2026-03-17T01:17:04Z 0.8 https://soc2.baremetalcyber.com/episodes/episode-1-what-soc-2-is-and-isn-t 2025-10-13T23:40:40Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-2-do-you-need-soc-2-now-buyer-contract-signals 2025-10-13T23:40:51Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-3-scoping-system-boundary-services-regions-tenants 2025-10-13T23:41:28Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-4-trust-services-criteria-at-a-glance 2025-10-13T23:41:59Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-5-control-ownership-raci-across-the-org 2025-10-13T23:42:30Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-6-program-roadmap-realistic-timelines 2025-10-13T23:43:01Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-7-type-i-vs-type-ii-and-bridge-letters 2025-10-13T23:43:31Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-8-writing-the-system-description 2025-10-13T23:44:00Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-9-subservice-orgs-inclusive-vs-carve-out 2025-10-13T23:51:28Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-10-cuecs-done-right 2025-10-13T23:52:00Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-11-how-to-read-a-soc-2-report 2025-10-13T23:52:28Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-12-cc1-governance-tone-at-the-top 2025-10-13T23:53:04Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-13-cc2-risk-assessment-method-cadence 2025-10-13T23:53:33Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-14-cc3-hr-lifecycle-hiring-training-offboarding 2025-10-13T23:54:03Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-15-cc4-commitments-slas-regulatory-requirements 2025-10-13T23:54:31Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-16-cc5-control-design-reviews-and-monitoring 2025-10-13T23:54:58Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-17-cc6-logical-access-iam-sso-mfa-jml 2025-10-13T23:55:25Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-18-cc7-ops-config-management-vulnerability-mgmt-patching 2025-10-13T23:55:59Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-19-cc8-change-management-sdlc-incl-iac-basics 2025-10-13T23:56:32Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-20-cc9-incident-management-communications 2025-10-13T23:56:59Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-21-cc10-data-integrity-in-pipelines 2025-10-13T23:57:30Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-22-cc11-vendor-risk-subservice-oversight 2025-10-13T23:58:02Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-23-cc12-physical-environmental-remote-first-realities 2025-10-13T23:58:31Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-24-availability-capacity-dr-rto-rpo-game-days 2025-10-13T23:59:05Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-25-confidentiality-classification-encryption-dlp 2025-10-13T23:59:33Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-26-processing-integrity-accuracy-completeness-monitoring 2025-10-14T00:00:01Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-27-privacy-notice-rights-dpias-retention-dsrs 2025-10-14T00:06:49Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-28-privacy-in-context-soc-2-vs-iso-27701-vs-hipaa 2025-10-14T00:07:20Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-29-evidence-for-a-c-pi-p-what-good-looks-like 2025-10-14T00:07:47Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-30-cloud-multitenant-edge-cases-scope-tenancy-regions 2025-10-14T00:08:27Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-31-strong-control-narratives-before-after-examples 2025-10-14T00:08:58Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-32-evidence-strategy-sampling-for-type-ii 2025-10-14T00:09:28Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-33-continuous-control-monitoring-automation 2025-10-14T00:09:55Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-34-ticketing-as-evidence-approvals-change-incidents 2025-10-14T00:10:21Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-35-audit-ready-logs-screenshots-accept-vs-reject 2025-10-14T00:10:49Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-36-ci-cd-cloud-proofs-pipelines-baselines-diffs 2025-10-14T00:11:19Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-37-policy-to-practice-traceability-text-proof-tests 2025-10-14T00:11:44Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-38-selecting-the-cpa-firm-independence 2025-10-14T00:12:14Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-39-readiness-assessments-gap-closure 2025-10-14T00:12:41Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-40-fieldwork-do-s-don-ts-request-lists-walkthroughs 2025-10-14T00:13:08Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-41-handling-exceptions-deviations 2025-10-14T00:13:39Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-42-final-report-reviews-distribution-practices 2025-10-14T00:14:06Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-43-crosswalks-soc-2-nist-csf-iso-27001-cis-18 2025-10-14T00:14:32Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-44-using-soc-2-to-answer-sig-caiq-customer-questionnaires 2025-10-14T00:15:00Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-45-pairing-with-pen-tests-bug-bounties-ssdf-slsa 2025-10-14T00:15:30Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-46-startup-vs-enterprise-right-sizing 2025-10-14T00:15:58Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-47-annual-maintenance-calendars-kris-maturity 2025-10-14T00:16:23Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-48-beyond-the-stamp-turning-soc-2-into-real-outcomes 2025-10-14T00:16:53Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-49-data-residency-sovereignty-in-soc-2-scopes 2025-10-14T00:17:52Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-50-key-management-byok-kms-rotations 2025-10-14T00:18:23Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-51-secrets-management-in-code-and-pipelines-deep-dive 2025-10-14T00:18:25Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-52-endpoint-mdm-controls-for-distributed-teams 2025-10-14T00:18:51Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-53-remote-work-security-home-offices-travel-contractors 2025-10-14T00:19:16Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-54-backup-restore-and-dr-testing-at-scale 2025-10-14T00:19:41Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-55-sre-for-availability-slos-error-budgets-incident-math 2025-10-14T00:20:09Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-56-designing-a-metrics-kris-program-for-soc-2 2025-10-14T00:22:06Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-57-genai-ml-services-in-scope-risks-controls-evidence 2025-10-14T00:22:39Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-58-customer-trust-portals-controlled-evidence-sharing 2025-10-14T00:23:06Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-59-evidence-retention-chain-of-custody-immutability 2025-10-14T00:23:32Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-60-multi-cloud-specifics-aws-azure-gcp-control-patterns 2025-10-14T00:24:02Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-61-mobile-app-sdlc-app-store-release-governance 2025-10-14T00:24:28Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-62-iac-guardrails-policy-as-code-opa-conftest-scps 2025-10-14T00:24:54Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-63-pentest-scoping-findings-lifecycle-remediation-proof 2025-10-14T00:25:21Z 0.9 https://soc2.baremetalcyber.com/episodes/episode-64-pre-sales-enablement-using-soc-2-to-accelerate-deals 2025-10-14T00:25:46Z 0.9 https://soc2.baremetalcyber.com/episodes/trailer 2025-10-27T01:22:54Z 0.9