Request a callback

GRC · Service

SOC 2 Type 2 readiness

Prepare for a SOC 2 Type 2 audit and get a report your enterprise customers will accept.

Timeline
8 to 12 weeks, then the observation period
Who does the work
Infofacility consultants, working remotely as part of your team
Price
On request

What you get

  • A scope: which Trust Services Criteria, which systems and which period.
  • Controls designed for your stack, and evidence collection set up from the first day.
  • A readiness check before the auditor starts, so gaps are fixed before the observation period.
  • Support through the observation period and the auditor's fieldwork. Infofacility prepares you; a licensed CPA firm issues the report.

What it covers

Trust Services CriteriaControl designEvidence collectionReadiness check

The scope is agreed on the scoping call and written down before the work starts.

How an engagement runs

First weeks

Gap assessment

Where you stand against the standard or the law, and a plan that fixes the biggest gaps first.

Middle

Build

Policies, records and controls written with your team, in the tools you already use.

Before the audit

Run and evidence

The controls running, the evidence collected, and an internal check before anyone external looks.

The audit

Audit and after

Support through the audit or assessment, and a handover so your team can run it.

The requirements it answers

The frameworks, laws and regulators whose requirements this work gives you evidence for.

AICPA Trust Services CriteriaSOC 2 Type 1SOC 2 Type 2
Read What is SOC 2? in the library

Pricing

SOC 2 Type 2 readiness

Price on request

Scope sets the price. Book a scoping call for a written quote, in USD or rupees.

Request a callback

Request a callback

Tell Infofacility what you need and by when. A consultant calls you back to agree the scope and send a quote.

Request a callback

Your details are used only to answer this request. The button opens your email app with the request filled in.