SOC 2

SOC 2 Complete System

The complete SOC 2 documentation set — 24 products, HIPAA add-on included, built around a control matrix that maps three frameworks at once.

What's included — 24 items

SOC 2 Information Security Policy

Word document

SOC 2 Access Control

Word document

SOC 2 Acceptable Use

Word document

SOC 2 Encryption & Cryptography

Word document

SOC 2 Workstation & Endpoint

Word document

SOC 2 Data Classification

Word document

SOC 2 Change Management

Word document

SOC 2 Risk Assessment & Management

Word document

SOC 2 Vendor & Third-Party Risk

Word document

SOC 2 Vulnerability Management

Word document

SOC 2 Log Management & Monitoring

Word document

SOC 2 Incident Response Plan

Word document

SOC 2 Business Continuity & DR Plan

Word document

SOC 2 Internal Audit

Word document

SOC 2 Security Awareness & Training

Word document

SOC 2 Onboarding & Offboarding

Word document

SOC 2 Roles & Responsibilities (RACI)

Word document

SOC 2 Risk Register

Excel workbook

SOC 2 Control Matrix

Excel workbook

SOC 2 Evidence Tracker

Excel workbook

SOC 2 Vendor Inventory

Excel workbook

SOC 2 System Description

Word document

SOC 2 HIPAA Security Rule Policies

Word document · HIPAA add-on

SOC 2 PHI Data Handling Procedure

Word document · HIPAA add-on

Delivered as a single .zip · Editable Word & Excel formats

Scope: Security, Availability and Confidentiality — criteria CC1–CC9, A1.1–A1.3 and C1.1–C1.2. Processing Integrity and Privacy are not covered. Most SOC 2 reports are Security-only; if yours needs PI or Privacy, this is a starting point, not the full set.

What this system covers

  • A complete policy set across security, operations, availability and governance
  • A control matrix mapped both ways — control to criterion and criterion to control — so every criterion has an owner
  • Controls mapped to SOC 2 TSC, NIST CSF 2.0 and the HIPAA Security Rule on the same row
  • Evidence tracking per control across the audit period
  • A system description structured to the AICPA description criteria, including CUEC and subservice organisations
  • HIPAA Security Rule policies and PHI data handling, included

Built for

B2B software companies Facing a first SOC 2 request from an enterprise customer
Security & compliance leads Preparing for a readiness assessment
Health-tech teams Needing SOC 2 and HIPAA from one control set
Compliance consultants One licence per client entity

Ready to get started?

$699 + VAT · One-time purchase · Instant download

Not sure which system is right for you? See the FAQ or contact us.