Your ReadySOC workspace is where your entire SOC 2 compliance program lives. Setting it up correctly from the start saves time and keeps your team organized.
Your company name appears on your audit report and is visible to all team members. To update it, go to Settings → General and edit the Company Name field.
ReadySOC pre-loads all 21 SOC 2 controls across all 5 Trust Service Criteria. Your first task is to mark any controls that don't apply to your business as Not Applicable.
Common examples:
Tip: When in doubt, keep a control in scope. It's better to demonstrate more controls than to have an auditor question why something was excluded.
SOC 2 is a team effort. Invite your engineering lead, security person, and anyone else involved in compliance. See Inviting your team for a step-by-step guide.
For each control, assign an owner — the person responsible for implementing and maintaining it. This creates accountability and makes it easy to see who's working on what. See Assigning owners and due dates.