SOC 2 Reporting Checklist

If your company is a service organization working with financial institutions or other industries handling sensitive client data, a System and Organization Controls (SOC) report—specifically a SOC 2 Type 1 or Type 2 report governed by the AICPA—may be essential.

Tereta’s comprehensive checklist simplifies the SOC process, helping you understand a SOC report, who needs it, the various types of it, and how to establish long-term compliance.

What’s inside the Checklist:

1. Introduction to SOC frameworks and the AICPA’s role
2. Overview of SOC 1, 2, and 3 reports—guidance on choosing the right one for your organization
3. Explanation of SOC 2 Type 1 and Type 2 audits and how to choose between them
4. Breakdown of Trust Service Criteria (TSC) controls required for compliance
5. Step-by-step guide to preparing for a successful Type 1 or Type 2 audit
6. A reminder that compliance is an ongoing commitment, not a one-time effort