Podcast

Alice in Supply Chains - Bonus Episode - The Limitations of SOC 2 with AJ Yawn

July 14, 2025

Descrição do episódio

In this special bonus episode, Alexandre Sieira, CTO and Co-founder of Tenchi Security, and Adrian Sanabria, Principal Researcher at The Defender's Initiative, sit down with AJ Yawn — Director of GRC Engineering at Aquia, author of GRC Engineering for AWS, and host of CyberTakes. Together, they dive deep into SOC 2 and its uncertain future, unpacking its challenges, limitations, why it became so widely adopted, and where it may be headed next. It’s a timely, insightful conversation for anyone focused on cyber risk management.

Notas do show

Show Transcript

Watch or listen to full episodes in English

Recent Episodes

Episode 11

New Episode Alert! The Alice in Supply Chains Podcast #11 is officially live! Join Alexandre Sieira (CTO & Cofounder, Tenchi Security) and Adrian Sanabria (Principal Researcher, The Defender's Initiative) as they unpack the most relevant stories from our latest Alice in Supply Chains newsletter (#39) - and discuss what they mean for third-party cyber risk management.

Episode 10

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) dive into the key themes from newsletter #38, offering expert insights on the latest developments in third-party cyber risk management. They explore whether cybercriminals have become too successful, unpack Jaguar Land Rover’s recent cyber challenges, discuss the true cost of a breach, and explain why effective risk management can’t stop at a company’s borders. Tune in every month for sharp analysis and essential conversations on the evolving landscape of TPCRM.

Episode 9

In this episode, Alexandre Sieira (CTO & Cofounder of Tenchi Security) and Adrian Sanabria (Principal Researcher at The Defender's Initiative) celebrate the 3rd anniversary of the Alice in Supply Chains newsletter - the very starting point for this podcast. Together, they revisit key highlights from issue #37, unpacking the stories shaping today’s supply chain security landscape: -The Salesloft “Perfect One Attack, Use Many” case -Vendors charging customers to complete security questionnaires -New CISA tools for supply chain security -The Sinqia compromise and the HSBC BRL theft Stay tuned, every month, for in-depth insights, expert analysis, and key discussions on TPCRM challenges.

View all episodes