Compliance
SOC 2
SOC 2 is an auditing framework for service organisations, based on the AICPA Trust Services Criteria.
What it is
SOC 2 reports describe how a service organisation manages data against five Trust Services Criteria: security, availability, processing integrity, confidentiality and privacy. The security criterion expects ongoing identification and remediation of vulnerabilities.
Background
Developed by the American Institute of Certified Public Accountants (AICPA). A SOC 2 Type I report assesses controls at a point in time; a Type II report assesses their operating effectiveness over a period. Reports are produced by licensed auditors.
How EthicalStrike helps
EthicalStrike supplies repeatable testing and evidence that supports the security criterion — showing that vulnerabilities are regularly found and addressed — which auditors can reference when evaluating your controls.
EthicalStrike supports your compliance efforts by testing your network and mapping findings to this framework. It is not a substitute for formal certification or an audit by an accredited body.