SOC 2 Consultancy Services

If you’re looking to understand whether SOC 2 is the right approach for you, what efforts are required to comply or attest, or prepare for a SOC 2 report (be that Type 1 or Type 2), Veritas can provide you with a full range of services.

SOC 2 Gap Analysis

This is one of Veritas Global most popular services and typically starts with a project planning and scoping workshop. Here, our consultants will help you clarify and determine your optimal scope and identify which of the SOC 2 criteria and controls will be subject to formal assessment. The workshop will help identify system architecture, processing, and staff within scope, along with relevant third-party suppliers and their role in supporting service delivery.

Having identified the relevant SOC 2 criteria and controls, VERITAS will work with you to conduct a detailed assessment of these controls against the SOC 2 requirements. The goals of the gap analysis will be to:

• Determine if your controls implementation meets the requirements of SOC 2
• Identify what further action is required to secure compliance with SOC 2
• Help you understand the efforts, resources, and timescales required to achieve a positive external assessment.

SOC 2 Remediation Support

Having identified what actions are required to secure compliance, Veritas can work with you to address any gaps. With some controls, this may involve expert advice and guidance as to what is expected and how to achieve the requirements. With other controls, such as those focused on governance, people, and process, Veritas consultants can assist in developing those controls by defining and documenting them. As with all Veritas remediation support, this will be tailored to your precise requirements.