> * Automate government-driven compliance standards - enable small businesses to sell into large companies/government entities, automatic certification when using pre-approved cloud solutions.
I don't see how this will end well. I appreciate the reasoning behind it, but this is not a good solution.
I'd prefer to see more "startup friendly" compliance frameworks that don't require tens to hundreds of thousands of dollars and make both the startup and their customers satisfied with the outcome. Something like a SOC2-lite that isn't so onerous but still provides a decent snapshot of their current situation from a third party's perspective.
I don't see how this will end well. I appreciate the reasoning behind it, but this is not a good solution.
I'd prefer to see more "startup friendly" compliance frameworks that don't require tens to hundreds of thousands of dollars and make both the startup and their customers satisfied with the outcome. Something like a SOC2-lite that isn't so onerous but still provides a decent snapshot of their current situation from a third party's perspective.