PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Embracing Resilience: HackerOne's Approach to Disaster Recovery

hackerone.com | blog | #incident-response | #resilience | #hackerone | #iso-27001 | #soc2 | #disaster-recovery | #business-continuity
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

HackerOne explains its disaster recovery approach: a tiered catalog for restoring the core platform first, an internally shared DR plan, and annual drills beyond ISO 27001 and SOC 2 compliance.
Published
Collected

Related coverage

blog · hackerone.com
Navigating the Maze of Compliance: SOC2, ISO, and FedRAMP Compared
SOC2, ISO 27001, and FedRAMP serve different compliance needs, and customers increasingly demand one before doing business. This comparison clarifies what each certification covers and how to choose.
blog · bugcrowd.com
How pentesters earn trust on the Bugcrowd Platform
Trust in pen testing must now be continuously proven. Bugcrowd pairs certifications like ISO 27001, SOC 2, and CREST with a vetted hacker community and transparent governance to earn enterprise trust.
blog · bugcrowd.com
Bugcrowd Achieves SOC 2 Type I Compliance
Bugcrowd announces SOC 2 Type I compliance under AICPA guidelines covering security, availability and confidentiality, building on its ISO 27001 certification and ahead of a SOC 2 Type II audit.
blog · aikido.dev
Aikido + Secureframe: Keeping compliance data fresh
Aikido now integrates with Secureframe, syncing vulnerability data automatically so SOC 2 Type 2 and ISO 27001:2022 evidence stays accurate—16 tests and 5 controls handled without CSV exports.
blog · aikido.dev
ISO 27001 certification: 8 things we learned
Aikido shares eight lessons from earning ISO 27001:2022 and SOC 2 Type 2: get advice from past certificants, publicize progress, choose the 2022 standard, and prepare to scrutinize internal processes.
blog · aikido.dev
How to prepare yourself for ISO 27001:2022
ISO 27001:2022 adds 11 new controls, including threat intelligence, cloud service security, ICT continuity readiness, and physical security monitoring. Aikido maps how its features help meet each one.
Back