SOC 2, ISAE 3402 and enterprise advisory, by the day
For work that does not fit a plan or a product. A SOC 2 readiness. An ISAE 3402 control framework. A supplier qualification by a bank. An operating model review. Scoped in days, deliverables listed before you commit.
What you get
Agreed per engagement. Typical deliverables:
- 01A SOC 2 readiness assessment against the Trust Services Criteria you choose
- 02An ISAE 3402 control description and control matrix
- 03Answers and evidence for a supplier qualification
- 04A written operating model review with a prioritised list
How it runs
- 01
Order and intake
Order online. Answer the intake questions. Ten minutes.
- 02
Pick your date
A start date at least three working days ahead, or a session date for the ones with a live session.
- 03
Day rate
Scoped in advisory days. You get a fixed number of days and a list of deliverables before you commit.
Day rate
Scoped in advisory days. You get a fixed number of days and a list of deliverables before you commit.
Asked before ordering
Do you write the SOC 2 report?
No. A licensed CPA firm issues a SOC 2 report. I get your controls and evidence ready for them. I have done it from the inside.
How many days is typical?
A SOC 2 Type 1 readiness is usually eight to fifteen days over two months. You get the number before you start.