Skip to main content
AUDIT & FINANCIAL

SOC 1 Type II Readiness readiness, assessment & assurance support

Service Organisation Control 1 — controls relevant to user entities' financial reporting.

TAP provides readiness and assurance workflows. It does not itself issue statutory certification, regulatory approval, an audit opinion or a SOC report.

Jurisdiction / reach

United States / AICPA attestation standards

TAP catalogue tier

Tier 3

Indicative assessment time

120 minutes

Assessment model

Framework workflow includes review

What this service covers

A structured readiness view of SOC 1

TAP combines the framework-specific assessment with governed gap, remediation, evidence and reporting workflows. The exact assessment content remains pinned to its governed TAP release so historical results are reproducible.

Service-organisation system and scope definition
Controls relevant to user entities’ financial reporting
Control design and implementation evidence
Operating-effectiveness readiness over the review period
Exceptions, remediation and management evidence

Commonly relevant sectors

Technology
Financial Services
Professional Services

Authoritative reference

SOC 1® examination under AT-C section 320 / SSAE No. 18, with AICPA SOC 1 Guide (2025)

Source authority

AICPA & CIMA

Source status

Current source verified

TAP content release

TAP-ASSESSMENT-LIBRARY-2026.09-R2

Open authoritative source
External standards and regulations can change independently of TAP. TAP keeps the assessment release and the current external-source reference visibly separate so a source update does not silently rewrite historical assessment evidence.

TAP assessment workflow

From framework scope to evidence-backed remediation

1. Scope

Confirm the relevant framework, organisational boundary, responsibilities and evidence owners before assessment.

2. Assess

Complete the governed TAP assessment against the framework-specific question set pinned to the active TAP content release.

3. Identify gaps

Record control gaps, severity, recommendations and supporting evidence without treating a readiness score as certification.

4. Remediate

Assign owners, due dates and remediation actions, then maintain evidence in the governed workspace.

5. Review & report

Use available consultant review and governed reporting features where the selected plan and assessment state permit them.

Framework-specific TAP assessment

Open the internal framework workspace to see the governed question domains, existing assessment state and available start/continue actions for your organisation.

Open assessment workspace

Build an evidence-backed SOC 1 readiness programme

Use TAP for governed assessment, gaps, remediation and evidence, with TASK support available where your plan and engagement require it.

Anonymous journey metrics

TAP can use a random session-only identifier to understand public pricing, health-check and checkout journeys. It is not used for advertising or cross-site tracking and does not include names, email addresses, health-check answers, enquiry text or document content.

Current choice: not selected · Cookie & Local Storage Policy