Checks / SOC 2
SOC 2
SOC 2 compliance checks
The AICPA Trust Services Criteria auditors use for security, availability, processing integrity, confidentiality and privacy.
20 controls, each a live check with a tamper-evident receipt. Run the whole framework at once from any AI assistant with sebbi_run_framework and framework=soc2.
- SOC 2 CC1 - control environment / integrity
- SOC 2 CC2 - information & communication
- SOC 2 CC3 - risk assessment process
- SOC 2 CC4 - monitoring of controls
- SOC 2 CC5 - control activities defined
- SOC 2 CC6.1 - logical access controls
- SOC 2 CC6.6 - boundary protection
- SOC 2 CC6.7 - data transmission encrypted
- SOC 2 CC7.1 - vulnerability detection
- SOC 2 CC7.2 - security incident monitoring
- SOC 2 CC7.3 - incident response evaluated
- SOC 2 CC8.1 - change management
- SOC 2 A1.2 - availability / capacity monitoring
- SOC 2 C1.1 - confidential data identified
- SOC 2 PI1.1 - processing integrity controls
- SOC 2 P1 - privacy notice & consent
- SOC 2 CC9.1 - risk mitigation for disruptions
- SOC 2 CC9.2 - vendor & third-party management
- SOC 2 A1.1 - capacity planning
- SOC 2 C1.2 - confidential data disposal