What's still broken in SOC 2 readiness and audit prep? | Not Hacker News!