SOC 2 and ISAE 3402 readiness
Your customers ask for an assurance report on your controls. We prepare you for the service auditor: we define the scope, design the controls, collect the evidence and get you ready for the examination period.
What you get
What a readiness project delivers.
- 01A reading of your customer's request and the report that answers it
- 02The system description and the scope of the report
- 03Control objectives and control design mapped to the criteria
- 04A readiness assessment against those controls, with the gaps closed
- 05Evidence prepared for the examination period
- 06Preparation for the service auditor and support during fieldwork
How it runs
- Phase 1
Request
Read the customer's request and choose the report that answers it.
- Phase 2
Scope and design
System description, control objectives and control design.
- Phase 3
Readiness
Assess the controls, close the gaps, prepare the evidence.
- Phase 4
Examination
Hand over to the service auditor and support during fieldwork.
Day rate
Scoped in advisory days. You get a fixed number of days and a list of deliverables before you commit.
Before you order
SOC 2 or ISAE 3402?
SOC 2 is the usual ask from US customers, ISAE 3402 from European and financial-services customers. We read the request with you and pick the one that answers it.
How many days does it take?
It depends on scope. You get a fixed number of days and a list of deliverables before you commit.
Start with the free readiness check
Ten minutes. A gap report you can keep.