What’s missing in your SOC 2 report?

Upload a report that you want to be inspected and receive a custom analysis of missing controls and weak testing. Find it before a client or attacker uncovers it first!

Upload File Learn More

Get Ready for Your SOC 2 Audit

Prepare to successfully start and complete your SOC 2 audit with our compliance checklist.

Download Checklist

All
Risk Mitigation
Logical and Physical Access Controls
Internal Control
System Operations
Change Management
Other Criteria

Risk Mitigation

Risk Mitigation

Learn how risk management is the foundation of the control environment and provides boundaries for your audit.

Internal Control

Internal Control

Learn how to create a control environment that is based on ethics, consistency, and accountability.

SOC 2 Academy - A Board's Independence from Management

SOC 2 Academy - Attracting, Developing, and Retaining Confident Employees

SOC 2 Academy - Communicating with External Parties

SOC 2 Academy - Communicating with Internal Parties

SOC 2 Academy - Defining the Responsibilities of Employees

SOC 2 Academy - Holding Your Employees Accountable

SOC 2 Academy - How Does an Auditor Test for Integrity?

SOC 2 Academy - Integration with the COSO Framework

SOC 2 Academy - Making Informed Decisions

SOC 2 Academy - The Importance of Organizational Communication

SOC 2 Academy: Designing Processes for Your Technology

SOC 2 Academy: Evaluations of Internal Control

SOC 2 Academy: Expectations of Policies and Procedures

SOC 2 Academy: Implementing Internal Controls

SOC 2 Academy: Internal Control Deficiencies

SOC 2 Academy: Who is Monitoring Internal Controls?

Specify Objectives for Risk Assessments

The Board of Directors Should Demonstrate Independence

Use Relevant Information to Support Internal Controls

System Operations

System Operations

Learn how to defend against malicious attacks by detecting and responding to system vulnerabilities.

SOC 2 Academy: Incident Response Best Practices

SOC 2 Academy: Incident Response Teams

SOC 2 Academy: Performing Daily Log Reviews

SOC 2 Academy: Recovering from a Security Incident

SOC 2 Academy: Testing Your Incident Response Plan

Change Management

Change Management

Learn about the best practices for authorizing, testing, approving, and implementing changes into your environment.

SOC 2 Academy: Change Control Processes

SOC 2 Academy: Change Management Best Practices

Other Criteria

Learn what criteria from the availability, confidentiality, processing integrity, and privacy categories are applicable to your services.