| name | assisting-with-soc2-audit-preparation |
|---|---|
| description | Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification. Use when you need to prepare for SOC 2 audits, assess Trust Service Criteria compliance, document security controls, or generate readiness reports. Trigger with phrases like "SOC 2 audit preparation", "SOC 2 readiness assessment", "collect SOC 2 evidence", or "Trust Service Criteria compliance". |
| allowed-tools | Read, Write, Edit, Grep, Glob, Bash(audit-collect:*), Bash(compliance-check:*) |
| version | 1.0.0 |
| author | Jeremy Longshore <[email protected]> |
| license | MIT |
Assisting With Soc2 Audit Preparation
Overview
This skill provides automated assistance for the described functionality.
Prerequisites
Before using this skill, ensure: - Documentation directory accessible in {baseDir}/docs/ - Infrastructure-as-code and configuration files available - Access to cloud provider logs (AWS CloudTrail, Azure Activity Log, GCP Audit Logs) - Security policies and procedures documented - Employee training records available - Incident response documentation accessible - Write permissions for audit reports in {baseDir}/soc2-audit/
Instructions
- Confirm scope (services, systems, period) and applicable SOC 2 criteria.
- Gather existing controls, policies, and evidence sources.
- Identify gaps and draft an evidence collection plan.
- Produce an audit-ready checklist and remediation backlog.
See {baseDir}/references/implementation.md for detailed implementation guide.
Output
The skill produces:
Primary Output: SOC 2 readiness report saved to {baseDir}/soc2-audit/readiness-report-YYYYMMDD.md
Report Structure: ```
SOC 2 Readiness Assessment
Error Handling
See {baseDir}/references/errors.md for comprehensive error handling.
Examples
See {baseDir}/references/examples.md for detailed examples.
Resources
- AICPA Trust Service Criteria: https://www.aicpa.org/interestareas/frc/assuranceadvisoryservices/trustdataintegritytaskforce.html
- SOC 2 Compliance Checklist: https://secureframe.com/hub/soc-2/checklist
- CIS Controls: https://www.cisecurity.org/controls/
- NIST Cybersecurity Framework: https://www.nist.gov/cyberframework
- Drata: SOC 2 compliance automation