Your basket is currently empty.
Account
United Kingdom
Select regional store:
This SOC 2 consultancy service has been designed to help service organisations maintain their compliance with their chosen AICPA (American Institute of Certified Public Accountants) TSC (Trust Services Criteria), following a successful SOC 2 audit.
Full project pricing depends on the size and complexity of your organisation and the level of assistance you need. Please contact us to discuss your requirements.
Although SOC 2 reports do not technically expire, they are generally considered valid for 12 months.
Once you’ve passed your SOC 2 audit, you’ll therefore want to maintain your compliance with your selected TSC to ensure your recertification audit goes as smoothly as possible – after all, no one wants to start again from scratch the following year, especially if they also have to add extra security controls to meet the requirements of new clients.
This is where we can help.
Our extensive expertise helping organisations implement and maintain information security best practices means we can support you as you embed the controls you need to operate securely.
Please contact us to discuss your specific needs.
As well as identifying any SOC 2 compliance gaps and helping you implement the controls you need to pass your SOC 2 audit, we can help you maintain your compliance until you recertify.
The SOC 2 Maintenance Service will help you maintain your organisation’s compliance with your selected AICPA (American Institute of Certified Public Accountants) TSC (Trust Services Criteria), following a successful SOC 2 audit.
Maintenance consultancy is specific to each organisation. Please contact us to discuss your requirements.
A SOC 2 audit report:
SOC 2 audits are aimed at organisations that provide services to other organisations.
If, for example, your organisation provides Cloud services, a SOC 2 audit report will go a long way to establishing trust and credibility with customers and other stakeholders, particularly if you process confidential or personal data.
We can help you prepare for a SOC 2 audit by:
Learn more about our SOC 2 Readiness Assessment
If our SOC 2 Readiness Assessment identifies any issues that need to be addressed, we can help you rectify them. Remediation consultancy is specific to each organisation but typically could include:
Additional services, such as penetration testing or advising on integrating your SOC 2 requirements into your ISO 27001-compliant ISMS (information security management system), can also be provided.
IT Governance specialises in international management system standards, IT governance, cyber security, cyber incident response management, risk management and compliance.
Our professional services team has a wealth of consultancy skills and technical expertise. This multi-disciplinary knowledge and experience means we can help you achieve your project objectives wherever you are in the world.