SSAE18 (SOC 2)
The AICPA issues the Trust Services Criteria (TSC) that outlines COSO objectives to be implemented by organizations wishing to issue a SSAE18 SOC 2 report. The TSC defines objectives within the following domains.
- Security
- Availability
- Processing Integrity
- Confidentiality
- Privacy
Organizations that implement SOC 2 are required to design a set of controls to meet the TSC objectives and generate their management attestation and system description report.
Why SOC 2?
More and more organizations are requiring service providers to comply with SOC 2 and issue reports as it helps them understand the security posture of their providers control environment and service.
It is often a competitive advantage to sell more services over their competition for providers that do not have SOC 2 certification.
Tools and Templates built on Atlassian
System Description Template
SOC 2 Control Scorecards
Audit program
Evidence repository
Agility is pre-configured with all the tools and templates you need to implement your SOC 2 program.
Easily track program status, control compliance, document status and remediation all within your or Ekko hosted Atlassian Cloud instance.
Start your SOC 2 Program
Agility provides you everything you need to start your SOC 2 program
- Scope guidance and templates
- Defined, roadmap project plan and milestones
- Control remediation dashboards and reports
Create Information Security Policies & Procedures
Pre-built SOC 2 compliant policy templates
- All policies required to support SOC 2 domains
Gap Analysis and Scorecard
Establish your control baseline and program starting point
- Generate control scorecard and reports
- Define your remediation and implementation roadmap
Select Certification CPA firm
SOC 2 requires an external CPA firm to conduct your certification audit
- SOC 2 Readiness assessment
- SOC 2 Type 1 Design Assessment
- SOC 2 Type 2 Attestation Audit
Program Implementation
Agility provides you all the tools to implement, track and remediate your SOC 2 Information Security program
- Remediation and control improvement task tracking
- Reporting and dashboards
- Reminders and scheduling
Program Implementation
Agility provides you all the tools to implement, track and remediate your Information Security program
- Remediation and control improvement task tracking
- Reporting and dashboards
- Reminders and scheduling
Internal Readiness
Conduct your Internal readiness assessment inside Agility
- SOC 2 readiness assessment
- Pre-built audit test cases
- Generate and manage control evidence
Certification
Conduct your SOC 2 certification audit with your selected registrar audit firm
- Get certified
- Conduct annual audits
SOC 2 Maintenance
Agility helps you maintain your ISMS
- Pre-built SOC 2 task templates
- Schedule and track ongoing activities
- Maintain evidence