Hacker News new | ask | show | jobs
by Areena_28 73 days ago
It surprised me when i got to know, i wonder how long this went undetected. Compliance certification exists so companies don't need to audit their vendors themselves, but here the whole certification is fake.

We've been building in the GRC space with Mitigata, and the pressure to make compliance "fast and painless" is real. And i know you all would agree with me that every prospect asks how quickly they can get certified. But fast certificates cannot be genuine.