We are a small startup with <10 employees requiring SOC 2 Type 1 in the coming year. We are using the free service to obtain this certification. I see the list in my portal showing what is needed for SOC 2 but it does not seem to be divided into what is required to meet just SOC 2 Type 1. Has anyone encountered this and can point me in the right direction? It’s my first time working in this space.
SHARE THIS TOPIC
Ask a Question
- You must be logged in to reply to this topic.
Hi Tina! Thanks for asking — SOC 2 types I and II have the same controls and policies, but different observation periods. When you find an auditor, specify that you’re looking for a SOC 2 type I audit, and they’ll be able to assist. Feel free to reach out with any more questions!