Readiness gap assessment
Review your current processes against the relevant Trust Services Criteria and agree a practical scope.
SOC 2 · Governance & assurance readiness
Get your security programme organised for a SOC 2 examination. We help you understand the Trust Services Criteria, assess control gaps, and prepare policies and evidence before working with an independent CPA firm.
Talk to our teamWhat you get
Review your current processes against the relevant Trust Services Criteria and agree a practical scope.
Identify control owners, document key procedures, and prioritise improvements based on risk.
Set up an evidence plan and help teams collect clear, consistent records for the examination period.
Prepare your organisation to engage an independent CPA firm for the SOC 2 examination and report.
Who this helps
SaaS and technology businesses responding to enterprise security reviews, preparing for a first SOC 2 examination, or improving the evidence and control processes around an existing programme.
Engagement outputs
Questions & answers
SOC 2 is an examination and reporting framework for service organisations, based on the AICPA Trust Services Criteria. It is not an ISO certificate.
A Type I report evaluates control design at a point in time. A Type II report evaluates control design and operating effectiveness over a defined period. Your independent CPA firm determines the appropriate examination approach and period.
No. The report is issued by an independent licensed CPA firm. Readiness support helps your organisation prepare but is not an audit or attestation.
Share your objectives, systems in scope, and any customer or audit requirements. We’ll discuss a suitable scope and engagement plan.