SOC 2 readiness checklist (free)

Use this free SOC 2 readiness checklist to quickly assess how prepared your organisation is for a Type 1 or Type 2 report. Each question maps to the Trust Services Criteria—covering scope, TSC mapping, controls, monitoring and evidence—so you can see where you stand and what to prioritise next.

What this covers

Scope & system description, TSC mapping, operational controls, attribute criteria and audit readiness.

How scoring works

Select Yes / Partial / No for each question. We calculate an overall score and domain coverage automatically.

Free PDF output

Download a free, branded PDF with a score dial, domain breakdown, top gaps and detailed responses to share with leadership or your auditor.

ISO 27001 ISO 27701 ISO 42001 Essential Eight SOC 2 DISP / ISM / IRAP

Governance & Scope

System boundary, report scope and leadership oversight.

0/0 answered

TSC Mapping & Risk

Map controls to CC + relevant A/C/PI/P and assess risks.

0/0 answered

Controls & Operations

Change, access, SDLC and third-party management.

0/0 answered

Logging, Incidents & Evidence

Operational monitoring, IR, evidence and cadences.

0/0 answered

Attribute Criteria (A/C/PI/P)

Availability, Confidentiality, Processing Integrity, Privacy.

0/0 answered

Type 1/2 & Audit Readiness

Period, population, sampling windows and prep.

0/0 answered
0%
Not started

Answer the questions to see your readiness.

📞 Microsoft Teams