Free Template Pack

The SOC 2 Security Testing Evidence Template

Security testing regularly produces a great deal of work and very little audit evidence, because the artifacts that get kept are reports rather than records of a programme operating. This pack fixes the shape of the evidence: a plan, per-engagement records, a coverage matrix, and a remediation tracker an auditor can sample from.

• A security testing programme plan covering scope, cadence, and ownership
• A red team engagement record and a purple team exercise log
• A blue team detection coverage matrix, so gaps are visible before an auditor finds them
• A finding remediation tracker that closes the loop with dates and evidence