Gap analysis
Reviewing existing security practices to identify gaps and areas for improvement.
SOC 2 / BPO CUSTOMER ASSURANCE
SOC 2 preparation for a BPO customer requirement.
A Manila BPO bidding for an enterprise contract needed to address a customer’s SOC 2 requirement. The project scope covered gap analysis, control implementation, policies, evidence collection and independent examination support.
The challenge
Translate the customer request into preparation work.
The BPO needed to develop security controls and documentation for the assurance process. The work brought those implementation tasks together with the evidence needed for independent review.
Project scope
The work involved.
Controls and policies
Implementing access, intrusion-detection and encryption measures alongside security policies and procedures.
Evidence collection
Helping organise the documentation supporting the SOC 2 programme.
Examination support
Supporting the independent SOC 2 examination process. The CPA firm is responsible for the examination and any resulting report.
Prepare before signing that new contract.
Bring the customer requirement and the service it covers so the preparation work can be scoped clearly.