{"product_id":"soc-2-policy-templates-pack","title":"SOC 2 Policy Templates Pack (20 Editable Policies)","description":"\u003cp\u003e\u003cstrong\u003eTwenty editable SOC 2 security policies that read like your company, not a generic template.\u003c\/strong\u003e Each one is mapped to the Trust Services Criteria and ends with the evidence auditors usually request.\u003c\/p\u003e\u003ch2\u003eWhat you get\u003c\/h2\u003e\u003col\u003e\n\u003cli\u003e\n\u003cstrong\u003e20 policies\u003c\/strong\u003e (Word, 105 pages in total): Information Security, Access Control, Acceptable Use, Asset Management, Change Management, Secure Software Development, Data Classification and Handling, Data Retention and Disposal, Encryption and Key Management, Incident Response, Business Continuity and Disaster Recovery, Backup, Vendor and Third-Party Management, Risk Management, Human Resources Security, Security Awareness and Training, Logging and Monitoring, Vulnerability and Patch Management, Network and Cloud Security, and Code of Conduct.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eConsistent structure\u003c\/strong\u003e in every policy: purpose, scope, roles, numbered policy statements, standards and minimums, exceptions, enforcement, review, related criteria and an evidence table, with blue Guidance notes and [square-bracket] placeholders.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003ePolicy-to-Criteria Map\u003c\/strong\u003e (Excel): all 20 policies mapped to all 61 criteria, with an automatic coverage check.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eAcknowledgement and Review Tracker\u003c\/strong\u003e (Excel): policy approval and review register, staff acknowledgement tracker, review log and dashboard.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eStart Here guide\u003c\/strong\u003e (PDF, 4 pages): the order of work, default owners and common mistakes.\u003c\/li\u003e\n\u003c\/ol\u003e\u003cp\u003eAlso included in the \u003ca href=\"\/products\/soc-2-starter-bundle\"\u003eSOC 2 Starter Bundle\u003c\/a\u003e and the \u003ca href=\"\/products\/soc-2-compliance-toolkit\"\u003eSOC 2 Compliance Toolkit\u003c\/a\u003e.\u003c\/p\u003e\u003ch2\u003eHow to use it\u003c\/h2\u003e\u003col\u003e\n\u003cli\u003eRead policy 01 end to end; it sets the governance model the others rely on.\u003c\/li\u003e\n\u003cli\u003eFind and replace your organization name, product name, cloud and identity providers and role titles across all 20.\u003c\/li\u003e\n\u003cli\u003eWork through each policy with its owner, changing every bracketed number to one you will reliably meet.\u003c\/li\u003e\n\u003cli\u003eCheck the coverage map, approve the policies and record dates in the tracker.\u003c\/li\u003e\n\u003cli\u003ePublish, run an acknowledgement campaign and collect evidence from day one.\u003c\/li\u003e\n\u003c\/ol\u003e\u003ch2\u003eWho it is for\u003c\/h2\u003e\u003cp\u003eFounders, CTOs, first security hires and operations leads at SaaS companies of roughly 10 to 200 people preparing for a first SOC 2 report, including teams on a compliance automation platform who want policies that match how they really work.\u003c\/p\u003e\u003ch2\u003eGood to know\u003c\/h2\u003e\u003cul\u003e\n\u003cli\u003eInstant download. Editable Word (.docx) and Excel (.xlsx), plus a PDF guide. Works in Excel 2016 or later, Microsoft 365 and LibreOffice; no macros.\u003c\/li\u003e\n\u003cli\u003eLicensed for use within one organization.\u003c\/li\u003e\n\u003cli\u003eCriteria are referenced by number and summarized in our own words; the AICPA criteria are free to download from the AICPA.\u003c\/li\u003e\n\u003cli\u003eSOC 2 is an attestation report by a licensed CPA firm, not a certification. These templates help you prepare; they do not guarantee an unqualified SOC 2 opinion.\u003c\/li\u003e\n\u003cli\u003e5-day fit guarantee: if it does not fit your system, contact us within 5 days of purchase.\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"ISO Cloud Consulting","offers":[{"title":"Default Title","offer_id":67603738853570,"sku":"ICC-SOC2-POLICIES","price":129.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0709\/8361\/4658\/files\/soc-2-policy-templates-pack.png?v=1790686101","url":"https:\/\/isocloudconsulting.com\/products\/soc-2-policy-templates-pack","provider":"ISO Cloud Consulting","version":"1.0","type":"link"}