SOC 2 Explained
Understand Type I vs. Type II reports, Trust Services Criteria, and who needs SOC 2.
Coming soon
SOC 2 Resources
SOC 2 Guidance for Secure Service Organizations.
Practical guidance for SaaS providers, technology companies, and service organizations building security programs aligned with the AICPA Trust Services Criteria and preparing for SOC 2 examinations.
SOC 2 Focus Areas
✓ Trust Services Criteria
✓ Security
✓ Availability
✓ Confidentiality
✓ Processing Integrity
✓ Privacy
✓ Evidence Collection
✓ Audit Readiness
Start Here
SOC 2 Learning Paths
Begin with the Trust Services Criteria and progress through governance, controls, evidence collection, and audit readiness.
Trust Services Criteria
Learn how the five Trust Services Criteria map to operational security controls.
Coming soonBuild a SOC 2 Program
Develop governance, technical controls, evidence, and recurring operational processes.
Explore Services →
SOC 2 Resource Library
Browse by Trust Services Area
This framework page will expand as additional SOC 2 implementation guidance is published.
Foundation
SOC 2 Fundamentals
Understand examination scope, reporting options, and governance expectations.
› SOC 2 Explained (Coming Soon)
› Type I vs Type II (Coming Soon)
› Compliance Services
› Managed IT Services
Controls
Implement Trust Services Criteria
Identity, monitoring, vulnerability management, change control, and security operations.
› Trust Services Criteria (Coming Soon)
› Evidence Collection (Coming Soon)
› Identity & Access Security
› Cybersecurity Operations
Operations
Operational Maturity
Incident response, logging, monitoring, backups, testing, and continual improvement.
› Penetration Testing
› Managed IT Services
› Continuous Monitoring (Coming Soon)
› Incident Response (Coming Soon)
Audit
Assessment Readiness
Policies, evidence, auditor coordination, executive reporting, and readiness planning.
› Audit Preparation (Coming Soon)
› Evidence Management (Coming Soon)
› Discuss SOC 2
› Compliance Support
Security Readiness Assessment
Start with a clear view of your risk, readiness, and next steps.
DBT’s Security Readiness Assessment helps identify gaps across cybersecurity operations, identity, compliance, infrastructure, monitoring, and resilience so your team can prioritize practical improvements.