Log in

HOW SOC 2 SAVVY ARE YOU?

If you’re leading SOC 2 compliance at your organization, this course is for you!

The most comprehensive masterclass for SOC 2 out there and the ONLY dedicated SOC 2 Master Implementer Certification in existence.

P.S. Earn CPE hours by completing this course! Oh, and it’s free.

Course curriculum

Module 1: Introduction to SOC 2

What is SOC 2 compliance?
AICPA COSO Framework
Trust Service Criteria (‘TSC’) and Point of Focus
Audit Timeline & period
Certification bodies

Module 2: The planning phase

Defining the scope
Creation of ‘System Description’
Types of Controls
Gap Analysis
Identifying Gaps and Remediation
Creation and Mapping of Controls
Choosing the Auditing Firm

Module 3: Framework Subject Matters

Control Environment
Risk Assessment
Monitoring Activities
Control Activities
Logical and Physical Access Controls
System Operations
Change Management
Risk Mitigation
Additional Criteria for Availability
Additional Criteria for Confidentiality
Additional Criteria for Processing Integrity
Additional Criteria for Privacy

Module 4: Prepare For Implementation

Shared Responsibility Model
Key Stakeholder Identification
Technical, Procedural, and Administrative Controls Implementation
Prioritization

Module 5: Security Management Procedures

Policies and Procedures
Passwords and MFA
Risk Mitigation
Risk Assessment
User Access Review
Security Awareness Training
Security Risk Vs Security Vulnerabilities
Endpoint Management and Anti-Malware
Assets Mapping and Classification
Human Resources
Maintenance, Monitoring, and Analysis of Audit Logs
Data Breaches and Disclosures
Crisis Management
Segregation of Duties and Least Privilege
Change Management
Internal Audit

Module 6: Initiating a SOC 2 Audit

Audit Principles and Concepts
Preparation of Audit
Trust but Verify Approach – Audit Evidence
Types of Audit Procedures Performed
Documentation

Module 7: Monitoring, Control, and Completing SOC 2 Project Plan

Automation of Controls
Real-time Identification of Non-Compliance Issues
Response and Records of Non-Compliance Issues

Module 8: Conducting a SOC 2 Audit

Communication During An Audit
Audit Procedures and Evaluation of Evidence – Auditors’ Point of View
Drafting Audit Plans
Audit Findings and Deviations

Module 9: Closing the Audit and Follow-Up

Audit Closing Procedure
Organizing a Closing Meeting and Stating The Conclusion of The Audit
Auditors Opinion Results
Deviations and Management’s Response
Complementary User Entity Controls (CUECs)
Sub Service Organizations Carved Out Controls
Corrective Action Plans For The Following Audit Cycle
Marketing Aspects and Logo Use

Meet our instructors:

About this course

Geared towards CISOs, CTOs and Compliance Officers, leading the SOC 2 project in their organizations, this free SOC 2 masterclass provides a comprehensive overview of the fundamentals surrounding SOC 2 compliance.

Upon course completion, you will be awarded a SOC 2 Master Implementer Certification, as well as earn CPE hours.

Why should you start SOC 2 compliance training today?

SOC 2 compliance is crucial for cloud-based products to ensure security of their customer data and boost trust. But the reality is, SOC 2 is made up of complex terminology, lengthy processes, loads of requirements and a whole lot of admin, that only those experienced in SOC 2 really understand.

Most organizations and those leading the SOC 2 compliance project, lack the expertise and knowledge of this security framework. Unless you are in the field of information security and compliance, it is very unlikely that you fully understand how SOC 2 compliance works, what exactly is required, what the process entails, and the list goes on.

SOC 2 compliance also gets quite technical with the required policies, procedures, controls and specific criteria relevant to your particular organization. You probably have asked yourself,

“Where do I even start?”

This is where our SOC 2 Academy comes in. This course is a comprehensive compliance masterclass that equips you with the skills and in-depth knowledge to successfully lead your organization’s SOC 2 compliance project and be fully prepared for your audit.

So why should you start SOC 2 audit training today?

Here’s just a few of the main reasons:

Who can apply for free SOC 2 training?

Simply put, ANYONE! We created this course so people can become educated in the fundamentals of SOC 2 compliance and fully understand all the nitty gritty details

But we know if you do not need to learn about SOC 2, you probably won’t. And that’s why when we got the brilliant idea of a SOC 2 Academy, we specifically had in mind those leading the SOC 2 compliance process in their organization. CISOs, CTOs, compliance officers or SOC 2 first-timers, in need of the ultimate SOC 2 crash course, the SOC 2 Academy is calling your name!

WHAT OUR CUSTOMERS SAY ABOUT US

Omer Rimoch CTO PayEm

Scytale exceeded our expectations. We continued operating as normal during our audit preparation. Our SOC 2 workflows were super organized, which made it the smoothest process we could have asked for.

Read Case Study
Yaron Lavi CTO, Deel

Our SOC 2 audit preparation was smooth sailing. Scytale streamlined the process by providing expert-driven technology. They shared valuable insights about our security systems so we can better protect our customers’ data.

Read Case Study
Tal Kollender CEO, GYTPOL

We couldn’t have undergone our SOC 2 audit without Scytale. Their team and smart automation made the process simple and timesaving. We gained valuable knowledge about our security systems and had fun working together.

Read Case Study