SOC 2 Preparation Checklist

Modified on Wed, 6 Sep, 2023 at 12:03 PM

SOC 2 Certification is simple and easy to set up in the C1 Risk platform.

The checklist and preparation steps outline how you can be ready to launch in less than 3 business days in the platform.

Note also, that once this process is complete you never need to repeat it as the system is configured to automate the process for you year over year.

Remember, SOC 2 is an ANNUAL Certification process that requires year-round compliance, internal audit and demonstrated risk management. Use C1Risk for each step in the SOC 2 Certification process.

If you are considering working with an auditor that provides their own platform, C1Risk provides some clear advantages that will save you time and money, also outlined below, and we will provide the auditor an upload of all necessary documentation to meet the requirement of your audit:

Capability	C1Risk	Auditor Document Repository
Upload Documents	Yes (Automated)	Yes, manual, repeat manual process annually
Year-round evidence collection	Yes	No
Evidence Review/Approval	Yes	No (which may lead to a finding/observation/additional costs)
Internal Audit	Yes	No (requires you to validate controls and evidence again)
Risk Register > Control Mapping	Yes	No
Policy Management > Control Mapping	Yes	No
Issue Management	Yes	No
Risk Assessment > Control Mapping	Yes	No
Vendor Management	Yes	No

Estimated Preparation Time to Launch SOC 2 Certification: 10-16 Hours

A summary table is provided here, or click on the link to download a checklist with the full description of each task:

Task	Time Required	Responsible
Onboarding Session (1)	1 Hour	C1Risk with Customer
Add Users	Included in session	C1Risk with Customer
Select Applicable Controls	Included in session.	C1Risk with Customer
Create Internal Control Set	Included in session	C1Risk with Customer
Upload SOC2 Report/Evidence List	72 Hour Maximum SLA	C1Risk
Onboarding Session (2)	1 Hour	C1Risk with Customer
Review Evidence collection readiness	Included in session	C1Risk with Customer
Assign Evidence Owners	Included in session	C1Risk with Customer

Update Evidence Records	1-2 Business days	Customer
Launch Evidence Collection	0 Hours	Automated

Attachments (1)

pdf

C1Risk SOC 2....pdf
43.9 KB