Prepare for SOC 2 Type II audit

Run SOC 2 Type II readiness forcing interrogation

Pre-observation, mid-period checkpoint, or pre-field-test month-10 readiness forcing questions

• · Scope (security, availability, processing integrity, confidentiality, privacy)
• · Observation period dates
• · TSC categories in scope

• · 6-question readiness assessment
• · Control matrix with ISO 27001 cross-walk
• · Exception log analysis
• · Audit firm readiness verdict (green/yellow/red)

• · gap_analyzer.py, control_matrix_builder.py, evidence_tracker.py, audit_simulator.py

SOC 2 program in progress; scope defined; observation period scheduled

Control skipped during cycle (likely audit finding); mid-period control changes; sparse exception documentation

• · 6 observation-period-specific questions
• · Auditor pressure-test framing
• · ISO 27001 cross-walk reuse strategy (75% overlap)