Apple Private Cloud Compute SoC 3 audit reports

bstsb

the page keeps 301ing to the home page for me - could be a region issue https://archive.ph/JYC9B

qurren

I thought they were working on M5 already? Why are they still auditing M3?

Havoc

I'm glad they're doing them. Audits are decidedly imperfect, but on balance people tend to toe the line better on good practices when they know they're being audited.

arkadiyt

For anyone unaware, a SOC3 is just a SOC2 with the audit details removed - it includes a high level statement from the company (Apple) and from the auditor (EY), that's it. Also Apple certainly does invest heavily in security and privacy but SOC2's are so commoditized that it's like saying "look I can afford 50k", it's not particularly interesting

dzonga

can someone correct me - so apple is using servers that are running a closed down version of iOS on what I would assume is apple silicone, probably excess chips or older chips for the iCloud Private Cloud ?

ProAm

Every audit is a cooked book audit. At least every single one Ive been a part of. Check mark tests.