Free resource

SOC 2 readiness checklist

Know exactly what an auditor will look for before you engage one. This checklist walks through scope, the Trust Services Criteria and the controls you need running before your observation window starts.

What is inside

  • Choosing scope and Trust Services Criteria
  • Governance, policies and risk assessment
  • Access control, MFA and access reviews
  • Operations, monitoring and incident response
  • Change management and vendor risk
  • Evidence, observation window and choosing an auditor

Get the checklist

Free and instant - it opens on this page, ready to tick off, print or save as a PDF.

See our privacy policy.

100% success record

Every client we have taken through an accreditation has achieved it - and kept it at every renewal.

We never mark our own homework

We submit ourselves to independent third-party testing. Certification is always issued by an independent body, never by us.

Physical tests, not questionnaires

We prove each control works on your real devices and services. Questionnaire answers can be inaccurate or optimistic; tests cannot.

Free assessment of where you are

We will look at your current position for free and tell you exactly which controls you need - with no obligation.

Find out where you stand - free

Book a free, no-obligation SOC 2 readiness checklist assessment. We will show you which controls you already meet, which you need, and the quickest route to getting certified.