Seriously, I’d tune in. We have protocols “for Sox compliance”, but I’ve never been privy to an audit so have no idea if they’re effective.

As a DevSecOps professional, I may have opportunities to make compliance easier or more effective, if I knew how they worked or had any feedback