Software security certs are not helping. Who are we kidding? [pdf]

Software vendors: “After several months, we finally received our Soc 2 certification!”

Also Software vendor: “Due to a recent security incident, some of our customer data was compromised..”