Thoughts on SOC2 as the companies security foundation

Hey all

I work in the security space and I regularly talk with CEOs and CTO's about implementing a framework like SOC2 as the foundation of their security program.

I'm curious what others think of this and your experience having or not having a set of "best security practices in place early on.

For added context sometimes I hear that people are worried that controls and process gets in the way of speed.

But on the flipside what happens when …

companies cybersecurity foundation security security foundation soc2