Help shape v1.0.
The Standard is a validation draft under review by practitioners. The most useful thing you can do is tell us where it falls apart, where your work actually happens.
Does SocOps read as a coherent connective operating layer, or does it feel like it's trying to rename all of security and compliance?
Would this fit into your real planning, release, SRE, GRC, and audit-readiness cadence — or would it create another parallel process?
Does the scanner-to-backlog model match how vulnerability findings actually fail in your organization?
HOW WE LISTEN Every submission reaches a moderated review channel and is read for substance, the objections most of all. Recurring themes are triaged into candidates for the next revision, and we follow up where a comment needs more context. Proprietary implementation details stay out of scope for public review.