Log in
HOW SOC 2 SAVVY ARE YOU?
If you’re leading SOC 2 compliance at your organization, then this course is for you.
The MOST comprehensive masterclass for SOC 2 out there, and the ONLY dedicated SOC 2 Master Implementer Certification in existence.
Oh, and it’s free.
Oh, and it’s free.
Course curriculum
- What is SOC 2 compliance?
- AICPA COSO Framework
- Trust Service Criteria (‘TSC’) and Point of Focus
- Audit Timeline & period
- Certification bodies
- Defining the scope
- Creation of ‘System Description’
- Types of Controls
- Gap Analysis
- Identifying Gaps and Remediation
- Creation and Mapping of Controls
- Choosing the Auditing Firm
- Control Environment
- Risk Assessment
- Monitoring Activities
- Control Activities
- Logical and Physical Access Controls
- System Operations
- Change Management
- Risk Mitigation
- Additional Criteria for Availability
- Additional Criteria for Confidentiality
- Additional Criteria for Processing Integrity
- Additional Criteria for Privacy
- Shared Responsibility Model
- Key Stakeholder Identification
- Technical, Procedural, and Administrative Controls Implementation
- Prioritization
- Policies and Procedures
- Passwords and MFA
- Risk Mitigation
- Risk Assessment
- User Access Review
- Security Awareness Training
- Security Risk Vs Security Vulnerabilities
- Endpoint Management and Anti-Malware
- Assets Mapping and Classification
- Human Resources
- Maintenance, Monitoring, and Analysis of Audit Logs
- Data Breaches and Disclosures
- Crisis Management
- Segregation of Duties and Least Privilege
- Change Management
- Internal Audit
- Audit Principles and Concepts
- Preparation of Audit
- Trust but Verify Approach – Audit Evidence
- Types of Audit Procedures Performed
- Documentation
- Automation of Controls
- Real-time Identification of Non-Compliance Issues
- Response and Records of Non-Compliance Issues
- Communication During An Audit
- Audit Procedures and Evaluation of Evidence – Auditors’ Point of View
- Drafting Audit Plans
- Audit Findings and Deviations
- Audit Closing Procedure
- Organizing a Closing Meeting and Stating The Conclusion of The Audit
- Auditors Opinion Results
- Deviations and Management’s Response
- Complementary User Entity Controls (CUECs)
- Sub Service Organizations Carved Out Controls
- Corrective Action Plans For The Following Audit Cycle
- Marketing Aspects and Logo Use
Meet our instructors:
Kyle Morris
Kyle is a former KPMG Analyst now serving as a Compliance Success Manager at Scytale helping SaaS companies live out the compliance dream.
Wesley Van Zyl
After 4 years at Deloitte, Wesley is currently a Compliance Success Manager at Scytale where he helps SaaS companies streamline their security compliance.
About this course
Geared towards CISOs, CTOs and Compliance Officers leading SOC 2 in their organizations, this free SOC 2 masterclass provides a comprehensive overview of the fundamentals surrounding SOC 2.
Upon course completion, students will be awarded a SOC 2 Master Implementer Certification, which means, to put it simply, that they are seriously awesome can take on SOC 2 with their eyes closed.
