CMMC Level 1 Readiness Checklist
Self-Assessment Workbook for All 17 Practices
PDFWPDF + Editable DOCX includedThe Mapping, Evidence & Timeline System for Type I and Type II
SOC 2 is not a writing problem — it is an evidence problem. This kit maps every criterion to the control, the policy, and the dated evidence that proves it, then runs your collection calendar across the observation period. Mapped to the AICPA 2017 Trust Services Criteria (CC1–CC9 plus Availability, Confidentiality, Processing Integrity, and Privacy), paraphrased and ready to work.
Digital download only. No physical product is shipped.
Start with the roadmap and scoping guide, score your gaps, and let the evidence tracker run your observation period. Adapt the Word documents to how your organization actually operates — auditors test reality, not paperwork — and keep the PDFs as clean reference copies.
Straight talk: this kit organizes the readiness work — it is not an audit, and no template can make an organization SOC 2 compliant or certified. SOC 2 reports are issued only by licensed CPA firms, and only your auditor can judge your controls. Have your control set reviewed by your CPA firm before your observation period begins.