Customer assurance
SOC 2 Type 1 & Type 2 readiness
Turn security practices into a program you can demonstrate to customers and auditors.
Your engagement, step by step
From Understanding
To Readiness.
We tailor the sequence to your maturity, operating footprint and objectives. Each phase has clear responsibilities and tangible outputs.
Discuss this service- 01
Agree Scope And Examination Goals
Define the service, system boundary, customer expectations and relevant Trust Services Criteria. Discuss Type 1 or Type 2 objectives with your independent CPA auditor.
Typical outputScoping brief and agreed readiness milestones
- 02
Map Controls And Assess Gaps
Understand how existing controls address the agreed criteria. Review policies, system descriptions and evidence with the people responsible for operation.
Typical outputControl matrix and prioritized gap register
- 03
Remediate And Assign Ownership
Support practical improvements to processes, documentation and technical controls. Establish who performs each control and how its operation is recorded.
Typical outputRemediation plan and control ownership matrix
- 04
Build Reliable Evidence Routines
Organize evidence collection and perform sample reviews. For a Type 2 goal, prepare routines that support consistent operation over the agreed examination period.
Typical outputEvidence index and recurring control calendar
- 05
Prepare For The Examination
Review outstanding issues, organize the handover and help your team respond to auditor information requests. The independent CPA firm performs the examination and issues the report.
Typical outputReadiness assessment and organized auditor handover
Getting started
What We Need From You
- Your business goals, target markets and readiness milestone
- A sponsor and access to relevant process or control owners
- Existing policies, system information and available evidence
- Known gaps, previous findings and external assessment plans
We agree the timeline after scoping. It depends on your starting point, systems, available people and the work needed to demonstrate operation.