SMEs and growing businesses
Structured governance, risk and compliance support without a large internal specialist team.
Services
SOC 2 & Controls Readiness
We help service organisations prepare their controls and evidence for a SOC 2 examination. An independent audit firm carries out the examination and issues the report; our role is readiness.
What this covers
- Scoping against the Trust Services Criteria
- Readiness assessment and gap analysis
- Control design and documentation
- Approach to collecting and organising evidence
- Policy set covering the applicable criteria
- Vendor and subservice organisation management
- Preparation for auditor walkthroughs
- Keeping controls operating between examinations
How we work on this
The same five steps apply to every service, applied here to this work.
Assess
Agree the scope, the criteria and the systems in the examination.
Identify
Compare your current controls with what the criteria expect.
Design
Design missing controls and document those that already exist.
Implement
Help teams operate controls and capture evidence as they go.
Monitor & Improve
Review results and keep controls effective through the reporting period.
Who it's for
Technology and digital businesses
Help managing cybersecurity, data protection, AI, cloud and wider technology risk.
Related services
ISO & Compliance Readiness
Preparation for ISO 27001, ISO/IEC 42001 and related standards.
Cybersecurity Governance & Vulnerability Management
Cybersecurity governance and vulnerability management programmes.
View this service: Cybersecurity Governance & Vulnerability Management
Audit, Assurance & Regulatory Readiness
Support with audits, assurance activity and regulatory readiness.
Discuss your SOC 2 readiness
Tell us what you are working towards and we will advise on where to start.