Compliance SOC 2complianceType 2AICPA

SOC 2 Readiness Accelerator

20-tab SOC 2 program covering assessment through Type 2 audit — 100+ controls, 35 required policies, 7 pre-populated operational logs, and an executive dashboard with three auto-calculated readiness metrics.

What this actually gives you

SOC 2 has three distinct phases — readiness assessment, observation period, audit — and this workbook serves all three, as a point-in-time assessment and an ongoing 3–12 month tracker.
100+ controls across CC1–CC9, each with its CC reference, family, description, evidence type, score and owner.
Plus 34 optional TSC controls across Availability, Confidentiality, Processing Integrity and Privacy.

The first product in the catalog that works as both a point-in-time assessment AND an ongoing 3–12 month operational tracker. SOC 2 has distinct phases — readiness assessment, observation period, audit — and this workbook serves all three.

The 2026 SOC 2 reality: audit costs $5–50K external plus 2–5x for preparation; typical timeline 9–15 months from zero to Type 2 report; continuous evidence now replaces periodic collection across the full observation window; AI systems fall under existing criteria with no exemption; identity lifecycle gets deepest scrutiny.

20-tab architecture:

Scoping: Scope & System Description (5 sections — system description, infrastructure, people/processes, subprocessors, commitments) and TSC Selection (5 criteria with in-scope status and common combination reference).

Control Libraries: Security Controls — 100+ controls across CC1–CC9, each with CC reference, family, description, evidence type, score, owner, and notes. Auto-calculated family and overall readiness scores. Optional TSC Controls (34 controls across Availability / Confidentiality / Processing Integrity / Privacy). Policy Library tracking 35 required policies with status, review dates, and auto-calculated completion percentage.

Ongoing Operations (7 tabs — where Type 2 audits succeed or fail): Evidence Tracker pre-seeded with 16 common artifact types. Access Review Log pre-seeded with 7 system types (the #1 audit finding area). Vendor Tracker with 10 common SaaS vendors pre-seeded. Risk Register with 10 pre-seeded risks and likelihood × impact heat mapping. Incident Log (CC7.4 evidence, 30 rows). Change Log (CC8.1 evidence, 30 rows). Training Tracker (CC1.5 evidence, 25 rows).

Audit Preparation: Gap Remediation (30 gaps with severity/owner/target/status, auto-calculated closure %). Auditor Selection with 4-tier guide, cost ranges, 10 questions to ask, and red flags. Readiness Checklist (50+ items across 6 stages: Foundational / Type 1 / Type 2 / Pre-audit / During audit / Post-audit). Common Findings (top 10 with prevention strategies). Executive Dashboard — three auto-calculated metrics: Overall SOC 2 Readiness, Policy Completion, Gap Closure.

Pre-populated operational tabs: 16 evidence artifacts auditors will want, 7 access review types, 10 SaaS vendors that appear in virtually every scope, 10 risks every register needs, 35 policies auditors will check. This is where a $15–40K readiness consultant spends their first month.

User Guide — 24 sections, 843 paragraphs. Standout sections: Section 20 (Common SOC 2 Mistakes — starting too broad, treating policies as fiction, sprinting evidence at the end, using audit firm for readiness), Section 14 (Type 1 vs Type 2 decision framework), Section 22 (FAQ: "how is this different from Drata/Vanta/Secureframe" and "do we need a readiness firm"). Industry adjustments for B2B SaaS, healthcare, FinTech, consumer, DevTools, and early-stage companies.

Also available in 7 bundles

This product is sold on its own and as part of a set. If you need more than this one, the set is cheaper than buying the parts.

4 products saves $207.00

SOC 2 + Build Foundation

SOC 2 Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$391.00

5 products saves $227.00

Compliance Program Starter

The Pillar 01 operating system plus the two workbooks most first programs actually need — SOC 2 Readiness and the NIST CSF 2.0 Self-Assessment — with both PDF readiness checklists included. 30% off buying separately.

$415.00

3 products saves $195.00

Healthcare Security Pack

HIPAA + SOC 2 + Ransomware Readiness for healthcare SaaS and digital health. Healthcare ransomware is 31% of all attacks. 17% off list.

$762.00

3 products saves $220.00

Global SaaS Compliance Pack

SOC 2 + ISO 27001 + GDPR/DPIA for B2B SaaS going international — US enterprise + EU data subjects in one bundle. 17% off list.

$862.00

3 products saves $229.00

Compliance Trifecta Bundle

SOC 2 + HIPAA + ISO 27001:2022 readiness in one bundle — the three certifications every enterprise buyer asks for. 17% off list.