NSM vs SOC 2
NSM (North Star Metric) and SOC 2 (System and Organization Controls 2) both come up in business conversations and get confused. Here's the plain-English difference, side by side, so you can use each one with confidence.
The key difference: NSM refers to north star metric, while SOC 2 refers to system and organization controls 2 — they describe different things even when they show up in the same sentence.
NSM — North Star Metric
The single metric that best captures the core value your product delivers to customers. A good NSM aligns product, growth, and exec teams around one number instead of a dashboard war.
SOC 2 — System and Organization Controls 2
AICPA audit framework for how a service organization handles customer data across security, availability, processing integrity, confidentiality, and privacy. SOC 2 reports are table stakes in B2B sales.
When to use NSM
Reach for "NSM" when the conversation is specifically about north star metric. The single metric that best captures the core value your product delivers to customers. A good NSM aligns product, growth, and exec teams around one number instead of a dashboard war.
When to use SOC 2
Reach for "SOC 2" when the conversation is specifically about system and organization controls 2. AICPA audit framework for how a service organization handles customer data across security, availability, processing integrity, confidentiality, and privacy. SOC 2 reports are table stakes in B2B sales.
FAQs
What is the difference between NSM and SOC 2?
NSM stands for North Star Metric — The single metric that best captures the core value your product delivers to customers. A good NSM aligns product, growth, and exec teams around one number instead of a dashboard war. SOC 2 stands for System and Organization Controls 2 — AICPA audit framework for how a service organization handles customer data across security, availability, processing integrity, confidentiality, and privacy. SOC 2 reports are table stakes in B2B sales.
Are NSM and SOC 2 the same thing?
No. They're often used in the same conversation because they're related, but they describe different concepts. NSM = North Star Metric. SOC 2 = System and Organization Controls 2.
When should I use NSM vs SOC 2?
Use NSM when you're specifically referring to north star metric. Use SOC 2 when the topic is system and organization controls 2.