SOC2-AC-01
Not StartedAccess provisioning
Require documented approval before granting system access.
Weight 3
Saved to your evidence record
Framework workspace
SOC 2 controls
Trust Services Criteria for security, availability, and confidentiality. Work through each control, record implementation status, and keep evidence notes ready for review.
0%
Weighted score
SOC2-AC-02
Not StartedMulti-factor authentication
Enforce MFA for workforce, administrative, and remote access.
Weight 5
Saved to your evidence record
SOC2-AC-03
Not StartedQuarterly access reviews
Review privileged and production access every quarter.
Weight 4
Saved to your evidence record
SOC2-DP-01
Not StartedEncryption at rest
Encrypt production databases, object storage, and backups.
Weight 5
Saved to your evidence record
SOC2-DP-02
Not StartedEncryption in transit
Require modern TLS for external and internal sensitive traffic.
Weight 4
Saved to your evidence record
SOC2-DP-03
Not StartedRetention and disposal
Define retention periods and verified secure deletion.
Weight 3
Saved to your evidence record