Service Organisation Control 2 — trust services criteria for security, availability, processing integrity, confidentiality, and privacy.
Service Organisation Control 2 — trust services criteria for security, availability, processing integrity, confidentiality, and privacy. This framework is part of tier 3 - audit & financial, designed for audit firms and large enterprises.
Authoritative current reference
2017 Trust Services Criteria with Revised Points of Focus (2022), plus 2018 SOC 2 Description Criteria with Revised Implementation Guidance (2022)
Authority: AICPA & CIMA
SOC 2 readiness should use the current AICPA Trust Services Criteria and description criteria. Type II readiness concerns control suitability and operating effectiveness over a period; TAP must not represent readiness as an issued SOC 2 report or certification.
Approximately 120 minutes to complete the full assessment
Complete comprehensive assessments with smart questioning that adapts to your responses.
Identify compliance gaps with severity ratings and prioritised remediation recommendations.
Securely store and organise compliance documentation with automated expiry tracking.
Access to TASK consultants for guidance, reviews, and remediation planning.
Generate professional PDF reports for stakeholders, auditors, and regulators.
Need enterprise deployment? Contact us
International Standard on Auditing — IT General Controls assessment for audit firms.
Service Organisation Control 1 — controls relevant to user entities' financial reporting.
Public Company Accounting Oversight Board IT control requirements for auditors.