Glossary
SOC 2
An attestation report on Trust Services Criteria (security and related criteria), issued by a licensed CPA firm-not by your consultancy.
Stratoworks° prepares readiness: controls, logging, access and evidence packs. We do not issue SOC 2 reports.
Buyers often ask for “SOC 2” without distinguishing Type I (design at a point in time) from Type II (operating effectiveness over a period). Align sales and security on which report closes the deal.
Cloud readiness means audit-friendly logging, access lifecycle, change management, vendor review and vulnerability handling-in AWS, Azure or GCP, not only in policy PDFs.