Am I ready for SOC 2?
Ten questions, under five minutes. See your score and a five-area breakdown the moment you finish, no email needed.
You are ready for SOC 2 when your security policies are written down, the controls they describe are running, and you can show an auditor proof that they work. Many small teams are partway there: two-step login and backups are often in place, while written policies, vendor reviews and an incident plan are not.
This assessment asks ten questions about how your team handles access, sign-in, activity logs, incidents, vendors, training, uptime, sensitive data, software changes and privacy. Each question has three answers, so a practice that is only partly in place still earns credit.
You get a score out of 100 and a breakdown across the five areas SOC 2 reports cover: Security, Availability, Confidentiality, Processing Integrity and Privacy. The result names your biggest gap first, so you know where to start.