SOC 2
An attestation report on controls for security, availability, confidentiality, processing integrity and privacy.
International · AICPAWho it applies to
Service and SaaS providers serving enterprise customers.
Key areas
- Trust Services Criteria
- Type I and Type II reports
- Evidence collection over an audit period
How Nigehban helps
- Gap assessment against the requirements
- Remediation roadmap and implementation support
- Independent audit and evidence review
- Monitoring that proves controls keep working
Related standards
ISO/IEC 27001:2022
The certifiable standard for an information security management system (ISMS).
InternationalISO/IEC 27002:2022
Practical guidance for implementing the controls listed in ISO/IEC 27001 Annex A.
InternationalISO/IEC 27005:2022
Guidance on managing information security risk within an ISMS.
International