Learn about how we run a scalable vulnerability management program built on top of GitHub. 
The post Scaling vulnerability management across thousands of services and more than 150 million findings appeared first on The GitHub Blog.

Scaling vulnerability management across thousands of services and more than 150 million findings

Reduce developer and auditor friction involved in demonstrating compliance and maintaining end-to-end traceability by focusing your efforts around the pull request.

Demonstrating end-to-end traceability with pull requests

GitHub’s Information Security and Privacy Management System (ISPMS) has been certified against ISO/IEC 27701:2019 (PII Processor) and 27018:2019 standards, as well as the Cloud Controls Matrix (CCM). These standards and frameworks are internationally recognized for security and privacy program best practices.

GitHub achieves ISO/IEC 27701:2019, 27018:2019, and CSA STAR certifications

Many customers want assurance that the sensitive information they send to us can be kept safe. One of the best ways to provide this assurance is a SOC 2 Type II report

CoFeed

Posts about #compliance from the top innovative companies, all in one place.