01
Scope
Free SOC 2 readiness assessment
How ready is your company for SOC 2?
Answer 15 practical questions and get an immediate first-pass view of your readiness. Built for small B2B technology teams preparing for their first SOC 2 engagement.
This is an educational readiness check, not an audit, attestation, or guarantee of SOC 2 compliance.
Assessment
15 questions · about 5 minutes
0/15
02
Access
Is MFA enforced for critical systems, cloud platforms, source control, and administrative access?
03
Access
Do you have a documented process for granting, changing, and removing user access?
04
Access
Do you perform and retain evidence of periodic user access reviews?
05
Change Management
Are production changes reviewed, approved, tested, and traceable to a ticket or pull request?
06
Security Operations
Are security-relevant logs retained and reviewed, with alerts for important events?
07
Security Operations
Do you have a repeatable vulnerability and patch-management process?
08
Incident Response
Do you have a documented incident-response plan with defined roles and an escalation process?
09
Vendors
Do you maintain a vendor inventory and assess security risk for important third parties?
10
Risk Management
Do you maintain a documented risk assessment or risk register and review it periodically?
11
Resilience
Do you have documented business continuity and disaster recovery procedures?
12
Resilience
Are backups monitored and are restore or recovery procedures tested and evidenced?
13
Governance
Do you have approved security policies that reflect how your company actually operates?
14
People
Do employees complete security awareness training and acknowledge relevant policies?
15
Evidence
Can you consistently produce dated evidence showing that recurring controls were performed?
Answer every question to see your result.