SOC 2: Protecting Customer Trust: Fundamental Concepts
45 Minutes
SOC 2: Protecting Customer Trust: Fundamental Concepts
Title
Topic
Duration
Industry
Jurisdiction
Type
Description
Customers rely on SOC 2 reports to decide whether they can trust a provider with their data. But a report only reflects controls that work consistently, and many of those controls depend on ordinary decisions made by employees across the organization.
This course follows the staff of Tallyhaven, a fictional payroll software company, through realistic situations: a colleague offering a shared login, a free tool that wants customer data, a misdirected payroll file and an auditor asking for evidence that doesn’t exist. Learners explore what a SOC 2 report covers and what it doesn’t, how auditors test controls, and how to handle access, customer data, vendors and incidents.
A role builder adds focused units for people managers, covering joiners, movers, leavers and access reviews, and for technical staff, covering change management, patching, logging and production access.
Course Objectives
- Explain why everyday actions, and the records they leave, matter to your organization’s SOC 2 report
- Apply access, data and vendor rules to situations you’re likely to face at work
- Recognize security incidents and near misses, and report them promptly
Fill in your details below to instantly view the course for free.
This is a trial version of the course SOC 2: Protecting Customer Trust: Fundamental Concepts Please note, we do not offer certificates for trial course completions.
By filling in this form you agree to share your information with VinciWorks. We take privacy seriously, click here to read our privacy notice.
