Engineering Manager: There's nothing I can do. We have to do it this way; it's required by law for SOC 2 compliance.

Programmer: Didn’t you choose what would be required for our SOC 2 compliance? The auditors just check to see if we're following our own rules.

Engineering Manager: I don’t know what you’re talking about... (slowly backing out of the conference room door)