{"product_id":"soc-2-starter-bundle","title":"SOC 2 Starter Bundle (Policies, Control Matrix, Risk \u0026 Vendor)","description":"\u003cp\u003e\u003cstrong\u003eThe SOC 2 foundations auditors test first: policies, controls and evidence, risk assessment and vendor management, with a 4-week plan.\u003c\/strong\u003e Bought separately these cost $237; the bundle is $199, a saving of $38.\u003c\/p\u003e\u003ch2\u003eWhat you get\u003c\/h2\u003e\u003col\u003e\n\u003cli\u003e\n\u003cstrong\u003e\u003ca href=\"\/products\/soc-2-policy-templates-pack\"\u003eSOC 2 Policy Templates Pack\u003c\/a\u003e\u003c\/strong\u003e (Word and Excel, $129 on its own): 20 editable policies, a map to all 61 criteria with coverage check, and an approval, review and acknowledgement tracker.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003e\u003ca href=\"\/products\/soc-2-readiness-assessment-control-matrix\"\u003eSOC 2 Readiness Assessment \u0026amp; Control Matrix\u003c\/a\u003e\u003c\/strong\u003e (Excel, $59 on its own): scope, 61 criteria, 148 controls, a readiness dashboard and a 111-item evidence request list.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003e\u003ca href=\"\/products\/soc-2-risk-assessment-vendor-management-kit\"\u003eSOC 2 Risk Assessment \u0026amp; Vendor Management Kit\u003c\/a\u003e\u003c\/strong\u003e (Word and Excel, $49 on its own): risk and vendor procedures, a register with 47 example risks, vendor tiering with CUEC mapping, and a 62-question vendor questionnaire.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eBundle Start Here guide\u003c\/strong\u003e (PDF): how the pieces connect and a 4-week plan. 29 files in total.\u003c\/li\u003e\n\u003c\/ol\u003e\u003ch2\u003eYour first 4 weeks\u003c\/h2\u003e\u003col\u003e\n\u003cli\u003e\n\u003cstrong\u003eWeek 1, scope and baseline:\u003c\/strong\u003e complete the Scope sheet, make a first pass of the control matrix with owners and status, read policy 01 and replace names and tools across all policies.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWeek 2, risk and vendors:\u003c\/strong\u003e run the risk workshop including fraud, build the vendor inventory, collect Critical vendor SOC reports and start CUEC mapping, adapt policies 02 to 10.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWeek 3, policies and controls:\u003c\/strong\u003e adapt policies 11 to 20 with realistic numbers, update the matrix with gaps, dates and N\/A decisions, and send the questionnaire to vendors without a SOC report.\u003c\/li\u003e\n\u003cli\u003e\n\u003cstrong\u003eWeek 4, approve and plan:\u003c\/strong\u003e CEO approves policies and the risk assessment, launch staff acknowledgement, check coverage, assign evidence owners and agree the gap-closure plan.\u003c\/li\u003e\n\u003c\/ol\u003e\u003cp\u003eMost teams then need several more weeks of control operation before a Type 1 date, depending on the size of the gaps.\u003c\/p\u003e\u003ch2\u003eWho it is for\u003c\/h2\u003e\u003cp\u003eFounders, first security hires and operations leads at SaaS companies of roughly 10 to 200 people who need to get SOC 2-ready without a large platform budget, or who use a platform and want stronger policies and a clearer view of their controls.\u003c\/p\u003e\u003ch2\u003eGood to know\u003c\/h2\u003e\u003cul\u003e\n\u003cli\u003eInstant download. Editable Word (.docx) and Excel (.xlsx), plus PDF guides. Works in Excel 2016 or later, Microsoft 365 and LibreOffice; no macros.\u003c\/li\u003e\n\u003cli\u003eLicensed for use within one organization.\u003c\/li\u003e\n\u003cli\u003eCriteria are referenced by number and summarized in our own words; the AICPA criteria are free to download from the AICPA.\u003c\/li\u003e\n\u003cli\u003eSOC 2 is an attestation report by a licensed CPA firm, not a certification. These templates help you prepare; they do not guarantee an unqualified SOC 2 opinion.\u003c\/li\u003e\n\u003cli\u003e5-day fit guarantee: if it does not fit your system, contact us within 5 days of purchase.\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"ISO Cloud Consulting","offers":[{"title":"Default Title","offer_id":67603742032066,"sku":"ICC-SOC2-STARTER","price":199.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0709\/8361\/4658\/files\/soc-2-starter-bundle.png?v=1790686196","url":"https:\/\/isocloudconsulting.com\/products\/soc-2-starter-bundle","provider":"ISO Cloud Consulting","version":"1.0","type":"link"}