SOC 2 Compliance Guide
Guides organizations through SOC 2 Type I and Type II audit preparation, covering Trust Services Criteria mapping, control design and implementation, evidence collection strategies, gap analysis, and continuous compliance monitoring. Applies AICPA attestation standards (SSAE 18), COSO 2013 framework, and industry best practices. This is NOT audit advice — always engage a qualified CPA firm for your examination.
SupaScore
84.4Best for
- ▸SOC 2 Type I and Type II audit preparation and control implementation
- ▸Trust Services Criteria mapping to existing organizational controls
- ▸Evidence collection strategy design for security, availability, and processing integrity
- ▸Gap analysis between current state and AICPA attestation requirements
- ▸Continuous compliance monitoring program establishment for SOC 2
What you'll get
- ●Detailed control matrix mapping specific organizational processes to Trust Services Criteria with implementation timelines and responsible parties
- ●Evidence collection playbook with sample documentation templates and testing procedures aligned to SSAE 18 requirements
- ●System boundary definition document with infrastructure components, data flows, and subservice organization treatment recommendations
Not designed for ↓
- ×Actual SOC 2 audit execution or CPA attestation services
- ×ISO 27001 or other non-SOC 2 compliance frameworks
- ×General cybersecurity advice unrelated to Trust Services Criteria
- ×Legal advice on contract terms or liability issues
Detailed information about your organization's system boundaries, services offered, customer commitments, and current control environment.
Specific control design recommendations mapped to Trust Services Criteria with implementation guidance and evidence collection strategies.
Risk Domain: legal. This skill covers legal topics. Consult a lawyer for binding decisions.
Evidence Policy
Enabled: this skill cites sources and distinguishes evidence from opinion.
Research Foundation: 8 sources (6 official docs, 1 industry frameworks, 1 web)
This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.
Version History
Initial release
Works well with
Need more depth?
Specialist skills that go deeper in areas this skill touches.
Common Workflows
Enterprise Compliance Stack
Comprehensive compliance program starting with security baseline, SOC 2 implementation, then SOX controls for public companies
Activate this skill in Claude Code
Sign up for free to access the full system prompt via REST API or MCP.
Start Free to Activate This Skill© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice