SOC Type 1 & 2

When a customer asks for SOC 2, agree the report type, service scope and deadline first. Then sequence control improvements, evidence collection and the independent CPA examination around the work your teams actually need to complete.
The right report choice starts with the decision your customer is making. Use this guide to agree the assurance objective, evaluate your evidence and build a timetable that your operations team can support.