TPR-210Third-Party & Supply Chain Risk
Reading a SOC 2 Report: Opinion, Scope, Exceptions, CUECs and Subservice Organisations
What you leave with
A SOC report review memo template and a completed review of a real report: what the opinion covers, what it carves out, which exceptions matter to you.
Same obligation, two realities
Early-stage and SMEyou have ten minutes per report; know where to look.
Enterprisea review standard applied by a team, with bridge letters and period gaps tracked.
How the course runs
- The obligation: where the responsibility comes from, cited by section.
- Two realities: how it is met in a small organisation and in an enterprise.
- The method: step-by-step practice with templates and edge cases.
- Paired labs: complete the one matching your work, read the other.
- Artefact and assessment: submit the artefact; a rubric and a short scenario quiz decide the certificate.