FOR SOFTWARE TEAMS RESPONDING TO CUSTOMER ASSURANCE REQUESTS
The decision this helps prepare
Which assurance claims are supported, and what remains to be prepared for a scoped examination?
What the review covers
- Boundary
- Operation
- Evidence
- Review
Useful information to have nearby
- A description of the service and its boundaries
- Relevant policies and change records
- Access reviews and evidence of operational activities
Use references and non-sensitive summaries. Do not paste account credentials, private client records or raw vulnerability evidence.
Example questions
- Are the service and system boundary clearly described?
- Are production changes reviewed and attributable?
- Are sensitive records shared through an approved channel?
After the review
Identify evidence gaps before making promises in a customer questionnaire. Readiness support does not issue a SOC report.
Review unknown answers, save a local snapshot, export a report or make a current-to-target plan. You can use the result without sending a message.
Scope and reference
12 original preparation prompts. Not a Trust Services Criteria catalogue, CPA examination, attestation or SOC 2 compliance percentage.
Questions are original. The reference provides context and does not endorse this website.
Read the reference