Free Documentation Toolkit

The SOC 2 Documentation Toolkit

Auditors do not read everything you write, they read a specific set of documents in a specific order, and a gap in that set costs more time than a gap in a control. This toolkit is that set: the index, the matrix, the system description, and the two trackers that keep both current through the observation window.

• A required policy index mapped to the Common Criteria
• A control matrix template linking control, owner, and evidence
• A system description outline covering what auditors expect to find where
• A policy lifecycle tracker and an evidence request response log