You may be a small or mid-size company with a chance to engage in business with a Fortune 1000 company and were asked about your SOC 2 status. If so, please continue reading and then review the other pages on this site:
On this website, I am presenting a simple-to-use Excel worksheet with specific questions covering the SOC 2 Trust Services Criteria (Security, Availability, Confidentiality, Processing Integrity, and Privacy) to help you identify which controls you have in place and which are missing or partially implemented.
This worksheet also provides links to critical security policy and procedure guidelines to make you aware of the policy documentation needed for SOC 2 compliance. These are not policy examples but comprehensive templates to ensure your documentation includes all topics and procedures applicable to your organization.
A short excerpt of the worksheet is shown below:
