SOC 2 vs HIPAA Pentest Requirements for HealthTech Startups

Key Takeaways SOC 2 does not explicitly name penetration testing as mandatory, but auditors expect one in practice for any company handling sensitive data at scale. HIPAA does not name penetration testing as a required control either, it requires a risk analysis, and a pentest is the most common way companies demonstrate one was performed…The post SOC 2 vs HIPAA Pentest Requirements for HealthTech Startups appeared first on Packet33.