GRC-201Governance, Risk & Compliance
SOC 2 From the Inside: Scoping, Ownership, Evidence and the Auditor
What you leave with
A scoped engagement plan: TSC selection, control ownership across control, evidence and task, an evidence calendar, and a walkthrough guide.
Same obligation, two realities
Early-stage and SMEfirst Type I, ten systems, founders as control owners.
Enterprisemulti-product Type II with subservice organisations and carve-outs.
How the course runs
- The obligation: where the responsibility comes from, cited by section.
- Two realities: how it is met in a small organisation and in an enterprise.
- The method: step-by-step practice with templates and edge cases.
- Paired labs: complete the one matching your work, read the other.
- Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.