Security Bsides Las Vegas 2024

Charissa Kim

Charissa Kim is a Security TPM at Semgrep. She has spoken on various panels and presented at conferences such as the National Cryptologic Foundation (NCF), National Institute of Standards and Technology (NIST), National Initiative for Cybersecurity Education (NICE), and many others. Charissa also founded Cyber Youth Tech (CyTech), a non-profit organization devoted to empowering the next generation of STEM and cybersecurity professionals. Furthermore, Charissa directed and produced K-12 Cyber Talk, a cybersecurity webcast sponsored by the National Security Agency, providing a welcoming environment for K-12 students to learn and explore cybersecurity along with its diverse career options and opportunities. She is also the first female All-American from the National CyberPatriot and Northrup Grumman Nationals competition."


Session

08-07
11:00
25min
GEN-Z Critique on SOC 2
Charissa Kim

The SOC2 Type II from the American Institute of Certified Public Accountants is the de facto standard of security audits in Silicon Valley. However, its roots lie in a different time and context. In this talk, I'll reinterpret SOC 2's objectives through the lens of Gen-Z as well as give 5 EFFICIENT and ESSENTIAL steps for obtaining SOC 2 certification at a startup-level. I'll highlight its strengths, pinpoint potential pitfalls, and keep you all in the loop with my Gen-Z perspective.

Proving Ground
Firenze