Sign InTry a questionToday's repAccept invitations

Sign In Try a question

← All coursesSOC 2 Type 2: What the Auditor Tests3 levels · 12 lessons

A fix before fieldwork does not change a Type 2 report~7 min
You wrote the thing they graded~6 min
An empty incident list is a claim~6 min
The Audit Window and What Gets Graded · Review~5 min

A policy proves design and stops~7 min
How do you know that is all of them?~7 min
Your scope is wherever the data went~6 min
Evidence Is A Population · Review~5 min

Disabled is not revoked~7 min
MFA is a set difference~6 min
Standing access is the finding~6 min
The Set Your Control Does Not Cover · Review~5 min

Course

SOC 2 Type 2: What the Auditor Tests

Predict which evidence an auditor will record as an exception, and prove each evidence list is complete.

Start free: A fix before fieldwork does not change a Type 2 report

The levels

Level I · 4 lessonsThe Audit Window and What Gets Graded