<div>
Sarbanes-Oxley Act,<br />
<a href="https://en.wikipedia.org/wiki/Sarbanes%E2%80%93Oxley_Act" rel="ugc">https://en.wikipedia.org/wiki/Sarbanes%E2%80%93Oxley_Act</a><br />
Post &nbsp;Enron, Tyco<br />
What standards are you looking to compare.<br />
Deals with setting additional responsibilities, including criminal liabilities on the CEO and CFO.....
</div>


<div>
Thank you - but that's SOX (Sarbanes Oxley). I'm referring to &quot;SOC 2&quot;.
</div>


<div>
<div class="content wysiwyg-content">
In simplest terms - what's its aim and how does it differ from other standards?
</div>
</div>


In simplest terms - what's its aim and how does it differ from other standards?

What is the goal of SOC2 compliance?

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.