GRC-201Governance, Risk & Compliance

SOC 2 From the Inside: Scoping, Ownership, Evidence and the Auditor

SOC 2 goes smoothly when scoping and ownership are right from day one. This course takes you through an engagement from the inside, including what the auditor will really ask.

6 lessons About 3 hours 4 ALCs Certificate on completion

What you'll be able to do

  • Choose the Trust Services Criteria that fit your business
  • Assign ownership across controls, evidence and tasks
  • Plan evidence collection across the audit period
  • Prepare for walkthroughs so the fieldwork has no surprises
You finish with

A scoped SOC 2 engagement plan

What's in it. TSC selection, control ownership across control, evidence and task, an evidence calendar, and a walkthrough guide.

You build it lesson by lesson, using your own organization, and submit it for your certificate. It's yours to keep and adapt.

Who it's for

Security and compliance leads at SaaS companies, and anyone running their first or next SOC 2.

What's inside

  1. Part 1Where the requirement comes from 16 min
  2. Part 2How small teams and enterprises meet it 14 min
  3. Part 3The method, step by step 20 min
  4. Part 4Hands-on lab: small team choose one 90 min
  5. Part 5Hands-on lab: enterprise choose one 120 min
  6. Part 6Finish and submit your deliverable 20 min

Built for your size

The requirement is the same everywhere. How you meet it depends on who you have. You pick the lab that matches your organization.

Small team or early-stageFirst Type I, ten systems, founders as control owners.
EnterpriseMulti-product Type II with subservice organisations and carve-outs.

How you earn the certificate

Submit your finished deliverable, which is scored against a published rubric, and pass a short scenario quiz. Your certificate goes to your wallet and can be checked by anyone on the public register.

Ready to build a scoped SOC 2 engagement plan?6 lessons, about 3 hours. Start whenever you're ready.
Join and enroll