A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes. Thanks to all contributors, you're awesome and wouldn't be possible without you! Our goal is to build a categorized community-driven collection of very well-known resources.

• Security has always been a big concern for business organizations. AICPA (American Institute of CPAs) developed SOC 2 as a component of its Service Organization Control reporting platform.

• SOC 2’s goal is to make systems manage customer data in such a way that they ensure the following five principles: security, availability, processing integrity, confidentiality, and privacy.

• Nowadays, it’s an even more significant concern, and it isn’t hard to understand why. The technology world changes at an amazingly fast pace. Companies around the world increasingly rely on the cloud with each passing year. And with each passing year, we see the number of security threats increase. That’s why compliance requirements are crucial in this day and age. We’re here today to talk about one specific compliance requirement: SOC 2 compliance. SOC 2 is one of the most common compliance requirements organizations have to adhere to. But what is SOC 2, and why should your company care?

The definition of SOC 2 is twofold.

• First, SOC 2 is a technical audit process.
• It’s a requirement for an organization to write, implement, and follow security procedures.

• Introduction
• Educational Courses
• Books
• Guides and Checklists
• Tools and Libraries
• Tutorials
• Journals
• Conferences
• Related Awesome Lists
• Subreddits
• Certifications
• Miscellaneous

^ back to top ^

^ back to top ^

MIT License & cc license

This work is licensed under a Creative Commons Attribution 4.0 International License.

To the extent possible under law, Paul Veillard has waived all copyright and related or neighboring rights to this work.